The Agent Skills Directory

[COMMAND_EXECUTION]: The skill includes numerous examples of Azure CLI commands, such as az deployment group create, az deployment sub create, and az group export, used to manage and modify cloud infrastructure environments.
[PRIVILEGE_ESCALATION]: Documented tasks like provisioning Virtual Networks, Network Security Groups, and Virtual Machines require the agent to operate with elevated cloud permissions, specifically mentioning the need for privileged access and the Contributor role in Azure.
[EXTERNAL_DOWNLOADS]: The skill utilizes the az bicep install command to download and install the Bicep CLI from official Microsoft sources during the environment setup phase.
[DYNAMIC_EXECUTION]: Operations such as az bicep build and az bicep decompile involve the runtime compilation and transformation of Infrastructure as Code files from Bicep to ARM JSON and vice versa.
[INDIRECT_PROMPT_INJECTION]: The skill is designed to process external Bicep and ARM JSON templates, which introduces an attack surface where malicious instructions could be embedded in the IaC data.
Ingestion points: The agent reads .bicep and .json template files when executing deployment and validation commands.
Boundary markers: No explicit delimiters or instructions to ignore natural language prompts within the template files are provided.
Capability inventory: Extensive cloud resource mutation capabilities and local file system interaction via the Azure CLI.
Sanitization: The skill relies on standard tool processing without additional sanitization layers for prompt-based content.

arm-templates