{"data":{"skill":{"slug":"microsoft-azure-rbac","name":"azure-rbac","icon":"📦","repo":"https://github.com/microsoft/github-copilot-for-azure/tree/main/plugin/skills/azure-rbac/","status":"approved","author":"microsoft","authorVersion":"0.0.0-placeholder","skillstoreRevision":2},"audit":{"id":"2739fd3f-203a-4b5a-91f5-47037ac4b935","skill_id":"0e1c364c-f6a3-4ec4-848d-60b7990ad4c9","version":5,"content_hash":"v3:ebdfe608f5de2b66ff37ab4af12af8ac4f5e8006:84b8dc9e79e95d247600e3395d9d8c75b6c3907777f6a3bb913ad88696d96ab2:a1e67724183ea045271bb656c9fa73839946a953f294c0f4deea4764c20916d1:736b696c6c732f6d6963726f736f66742f617a7572652d72626163:19d13552ff186222a08dd844e4a87397","risk_level":"safe","is_blocked":false,"safe_to_publish":true,"analysis_status":"ok","agent_auto_install_policy":"allowed","manual_install_policy":"allowed","summary":"Both static findings are false positives caused by Markdown inline-code delimiters around an Azure permission name. The skill contains no executable shell or Ruby command at those locations.","remediation":[],"risk_factor_evidence":[{"factor":"external_commands","evidence":[{"file":"SKILL.md","line_end":13,"line_start":13},{"file":"SKILL.md","line_end":17,"line_start":17}]}],"critical_findings":[],"high_findings":[],"medium_findings":[],"low_findings":[],"dangerous_patterns":[],"files_scanned":2,"total_lines":25,"audit_model":"codex","audited_at":"2026-07-23T19:16:51.225+00:00","created_at":"2026-07-25T23:07:10.517295+00:00","static_findings":[{"id":"external_commands:SKILL.md:13:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"To assign RBAC roles to identities, you need a role that includes the `Microsoft.Authorization/roleA","category":"external_commands","line_end":13,"severity":"medium","line_start":13},{"id":"external_commands:SKILL.md:17:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"- **Custom Role** with `Microsoft.Authorization/roleAssignments/write`","category":"external_commands","line_end":17,"severity":"medium","line_start":17}],"finding_verdicts":[{"id":"external_commands:SKILL.md:13:ruby-shell-backtick-execution","reason":"The backticks delimit an Azure permission name in Markdown prose; no shell, Ruby, interpolation, or execution mechanism exists.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:17:ruby-shell-backtick-execution","reason":"The backticks format the same Azure permission inside a Markdown list item; the line contains no executable command or dynamic input.","verdict":"false_positive","confidence":0.99}],"semantic_findings":[],"subject_marketplace_commit_sha":"ebdfe608f5de2b66ff37ab4af12af8ac4f5e8006","subject_content_hash":"84b8dc9e79e95d247600e3395d9d8c75b6c3907777f6a3bb913ad88696d96ab2","subject_tree_hash":"a1e67724183ea045271bb656c9fa73839946a953f294c0f4deea4764c20916d1","subject_plugin_path":"skills/microsoft/azure-rbac","audit_payload_hash":"19d13552ff186222a08dd844e4a87397","confirmed_risk_level":"safe","scanner_version":"3.0.0","policy_version":"skillstore-security-audit-policy-v1","subject":{"marketplaceCommitSha":"ebdfe608f5de2b66ff37ab4af12af8ac4f5e8006","contentHash":"84b8dc9e79e95d247600e3395d9d8c75b6c3907777f6a3bb913ad88696d96ab2","treeHash":"a1e67724183ea045271bb656c9fa73839946a953f294c0f4deea4764c20916d1","pluginPath":"skills/microsoft/azure-rbac","auditPayloadHash":"19d13552ff186222a08dd844e4a87397"},"scannerVersion":"3.0.0","policyVersion":"skillstore-security-audit-policy-v1"},"auditTranslation":null,"localization":{"requestedLocale":"en","contentLocale":"en","availableLocales":["en"],"fallbackToEnglish":false},"attestation":{"availability":"issued","url":"/api/skills/microsoft-azure-rbac/audits/5/attestation","status":"active"},"trust":{"publicState":"public","auditState":"complete","auditCurrentness":null,"confirmedRiskLevel":"safe","confirmedFindingCount":0,"capabilityReviewCount":0,"needsReviewCount":0,"falsePositiveCount":0,"agentAutoInstallPolicy":"allowed","manualInstallPolicy":"allowed","artifactSignatureState":"available","attestationState":"active","verificationState":"not_verified"},"isLatest":true}}