Audit History

The audit reviewed 80 static findings; 79 are documentation-related false positives. One finding is confirmed because an example imports an OpenAPI specification from a mutable branch. Semantic review also found caller-controlled rate-limit keys and commands that expose subscription keys.

All static findings were adjudicated as false positives from Markdown documentation, Azure CLI examples, Azure SDK snippets, and APIM policy examples. No prompt injection attempt, credential exfiltration, malware behavior, or covert network behavior was found in the reviewed skill files.

All static findings were adjudicated as false positives after reviewing the cited source context. The flagged content is Markdown formatting, Azure CLI examples, APIM policy snippets, documentation links, and defensive content safety terminology. No evidence found of malware, prompt injection, credential exfiltration, or unauthorized command execution.

All static findings were adjudicated as false positives after reviewing the cited source context. The flagged content is Markdown formatting, Azure CLI examples, APIM policy snippets, documentation links, and defensive content safety terminology. No evidence found of malware, prompt injection, credential exfiltration, or unauthorized command execution.

Static analysis flagged many command, network, weak-crypto, and jailbreak-keyword patterns, but review found they are documentation examples for Azure API Management, policy snippets, SDK notes, and content-safety configuration. No hidden execution path, data exfiltration behavior, malicious prompt injection, or credential harvesting was found. The residual risk is low because users may copy cloud provisioning commands that affect Azure resources and costs.

This is an official Microsoft skill for configuring Azure API Management as an AI Gateway. All static findings are false positives: external_commands are legitimate Azure CLI commands for infrastructure deployment, network findings are Microsoft documentation URLs, and 'jailbreak' references describe a content safety security feature that detects/blocks jailbreak attempts, not a vulnerability.