Versioned security assessment

Report ID: SA-A9AD50E9

6/30/2026, 7:24:02 AM

azure-messaging security assessment v2

Skill Security Certification Report

Audit History
Audit model: codex Historical report
Skill name
azure-messaging
Version
v2
Maintainer
microsoft
Source
github.com/microsoft/github-copilot-for-azure/tree/main/plugin/skills/azure-messaging/
Coverage
10 Files scanned · 599 Lines analyzed
Policy version
Unavailable

Highest confirmed finding severity

Low

1 confirmed security finding requires attention.

Installation context

Historical evidence

This report may not describe the currently installable artifact. Open the current Skill page for install guidance.

Open current Skill page

This report does not block or authorize the manifest or ZIP.

Static analysis reported many command, network, browser storage, weak crypto, and reconnaissance patterns. Manual review found these are Markdown troubleshooting examples, Azure SDK identifiers, placeholder endpoints, and links to Microsoft or Azure documentation, not executable skill logic. No evidence found of malicious intent, prompt injection, credential exfiltration, or hidden code execution.

Report position

Historical report

Open audit history before using this report to install.

Audit attestation

Not attestable

The required immutable binding is incomplete.

Human verification

Not verified

No human verification is recorded for this report.

Coverage

10 Files scanned · 599 Lines analyzed

1 item shown for review

Limitations

This report does not claim runtime or sandbox execution and does not prove the absence of side effects.

Evidence chain

Follow the evidence from source binding to the install contract. Available evidence supports verification; it is not a safety guarantee.

  1. Source

    Binding unavailable

  2. Artifact

    Identity incomplete

  3. Audit

    Complete

  4. Install contract

    Open manifest to verify

    Open manifest

Capabilities observed

Observed means this report recorded supporting evidence. Not recorded does not prove that a capability is absent.

Contains scripts

May execute code included with the Skill.

Not recorded by this audit

Network access

May connect to external services.

Observed in 28 evidence locations

Filesystem access

May read or write local files.

Not recorded by this audit

Env variables

May read values from the process environment.

Not recorded by this audit

External commands

May invoke commands or programs outside the Skill.

Observed in 149 evidence locations

Risk findings

Confirmed security concerns are separated from items that still need review.

Confirmed security concerns (1)

RISK-001 Low
SKILL.md:32-40SKILL.md:42-49SKILL.md:61-63
MCP Tool References Require User-Authorized Azure Access
The skill recommends Azure MCP tools for service health, resource listing, diagnostic logs, and documentation search. This is a legitimate capability, but it requires user-authorized Azure access and should be treated as a low operational risk.
The tool names and workflow clearly indicate external Azure and documentation lookups. The risk is limited because the file only instructs use of named MCP tools and does not contain hidden exfiltration logic.

Expert evidence

Immutable subject identity, scanner metadata, dismissed matches, and source-level evidence.

Artifact subject

Marketplace commit
Unavailable
Content hash
Unavailable
Tree hash
Unavailable
Skill path
Unavailable
Audit payload hash
Unavailable

Analysis metadata

Audit model: codex

Analysis state: Complete

Scope is limited to the recorded files, lines, methods, and evidence. No runtime or sandbox execution is claimed.

Static false positives ignored (3)
Low
SKILL.md:22references/service-troubleshooting.md:18-24references/sdk/azure-eventhubs-js.md:17-26references/sdk/azure-servicebus-js.md:20-34references/sdk/azure-servicebus-java.md:21-26
Markdown Command Examples Misclassified as Code Execution
The analyzer flagged many inline backticks and fenced examples as Ruby or shell execution. Manual review shows they are documentation snippets for SDK errors, logging settings, and connectivity tests, not executable files or invoked commands.
The referenced content is Markdown documentation and code samples. No file contains a runnable script, process spawn, eval call, or dynamic command execution path.
Low
references/sdk/azure-eventhubs-dotnet.md:3references/sdk/azure-eventhubs-java.md:3-5references/sdk/azure-eventhubs-py.md:63-70references/service-troubleshooting.md:66-73
External Links and Endpoint Placeholders Are Expected Documentation
Hardcoded URLs are references to GitHub, Microsoft Learn, Azure status, or placeholder Azure service endpoints. They document official troubleshooting sources and example endpoint formats rather than sending data to an external service.
URLs point to official Azure, Microsoft Learn, GitHub SDK documentation, or angle-bracket placeholders. No evidence shows data collection, callbacks, or unauthorized network requests.
Low
references/sdk/azure-eventhubs-js.md:28-31references/service-troubleshooting.md:16-24references/service-troubleshooting.md:30-32references/sdk/azure-servicebus-py.md:48-50
Browser Storage and Reconnaissance Patterns Are Troubleshooting Instructions
The browser storage finding is a JavaScript SDK logging example that sets local debug configuration. The reconnaissance findings are user-directed diagnostic commands such as DNS, socket, and network checks for connectivity troubleshooting.
The snippets are presented as troubleshooting guidance for the user to run in their own environment. They do not automate browser storage access or scan networks from the skill.

Verify and export

JSON report CITATION.cff SARIF 2.1.0 Signed installation manifest

The manifest and lockfile bind install artifacts to cryptographic hashes. This integrity claim is separate from the security assessment.

Audit attestation: not_attestable