azure-compute

HIGH W007: Insecure credential handling detected in skill instructions.

• Insecure credential handling detected (high risk: 1.00). The prompt includes literal secrets and examples that embed credentials directly in CLI commands (e.g., --admin-password "P@ssw0rd123!", --registry-password , DB_PASSWORD=s3cr3t, AzureWebJobsStorage=""), which requires the LLM to handle/output secret values verbatim and creates an exfiltration risk.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill includes runtime commands that fetch and execute external code (e.g., az webapp deployment source config --repo-url https://github.com/myorg/myrepo and container image pulls like mcr.microsoft.com/azuredocs/containerapps-helloworld:latest, nginx:alpine, and myregistry.azurecr.io/myapp:latest), so remote content would be executed when those commands are run.