Historial de auditorías

Most static alerts are documentation syntax, official Microsoft endpoints, private or sample addresses, and SSH public-key references. Fourteen static findings remain confirmed because they contact a third party or change remote firewall, authentication, privilege, networking, or SELinux state. Semantic review also found shell injection exposure, fail-open ingress, unsafe host-key guidance, broad unconfirmed EMM changes, and plaintext password handling.

Most static alerts are false positives from markdown links, Azure documentation URLs, public SSH key examples, and IaC templates. Confirmed risks are operational: selected troubleshooting commands can change VM credentials, firewall access, networking, or SELinux state, and the GitHub PR delivery path lacks documented validation for shell placeholders. No prompt injection attempt was found in the reviewed files.

Static analysis flagged PowerShell examples, web_fetch references, and hardcoded URLs, but context shows documentation-only use of Microsoft endpoints. No prompt injection, credential handling, deployment action, or data exfiltration intent was found. The skill depends on public network lookups for current documentation and pricing, so stale data and network access should be disclosed.

Static analysis reported many command, network, weak-crypto, and reconnaissance patterns. Review found these are Markdown examples and public Microsoft documentation links, not executable code or malicious behavior. The remaining risk is low because the skill intentionally asks the assistant to fetch public Azure documentation and pricing data.

All static findings are false positives. The detected patterns are code examples within markdown documentation showing API usage (curl, bash, PowerShell) and public Azure endpoints. The skill is a legitimate Microsoft Azure VM recommendation tool that uses only public, unauthenticated APIs. No executable code, no credentials, no deployments - purely informational recommendations.