The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The installation instructions for Linux environments fetch a script from the official Microsoft domain aka.ms/InstallAzureCLIDeb.
[REMOTE_CODE_EXECUTION]: The skill documents the use of sudo bash to execute the downloaded Azure CLI installation script, which is a standard vendor-recommended setup procedure.
[REMOTE_CODE_EXECUTION]: The az acr build and az acr task commands are documented to pull source code from remote Git repositories (e.g., GitHub) for building container images in the cloud.
[CREDENTIALS_UNSAFE]: The skill promotes security best practices by advising against the use of the admin user and hardcoded credentials. It provides examples of secure authentication using managed identities, Entra ID, and piping secrets to stdin rather than passing them as command-line arguments.
[COMMAND_EXECUTION]: Includes standard diagnostic and management commands for Azure services, such as az login, az account set, and az acr check-health.
[PROMPT_INJECTION]: Evaluated for indirect prompt injection surface as it processes external Git repositories and task configuration files. Ingestion points include the --context URL in az acr build and az acr task create. Capabilities include cloud-based image builds and command execution. While boundary markers and explicit sanitization are not detailed in the CLI instructions, these risks are inherent to the operation of a container build service and are managed within the Azure cloud environment.

azure-container-registry-cli