Versioned security assessment

Report ID: SA-B296D488

6/30/2026, 7:25:47 AM

azure-observability security assessment v2

Skill Security Certification Report

Audit History

Audit model: codex Historical report

Skill name: azure-observability
Version: v2
Maintainer: microsoft
Source: github.com/microsoft/github-copilot-for-azure/tree/main/plugin/skills/azure-observability/
Coverage: 9 Files scanned · 329 Lines analyzed
Policy version: Unavailable

Highest confirmed finding severity

Low

1 confirmed security finding requires attention.

Installation context

Historical evidence

This report may not describe the currently installable artifact. Open the current Skill page for install guidance.

Open current Skill page

This report does not block or authorize the manifest or ZIP.

Static analysis flagged many command, network, environment, and weak-crypto patterns, but review found documentation examples rather than executable skill code. The only residual risks are that users may run Azure CLI or SDK examples against live resources and should protect connection strings. No evidence found of prompt injection, credential exfiltration, obfuscation, or confirmed malicious intent.

Report position

Historical report

Open audit history before using this report to install.

Audit attestation

Not attestable

The required immutable binding is incomplete.

Human verification

Not verified

No human verification is recorded for this report.

Coverage

9 Files scanned · 329 Lines analyzed

1 item shown for review

Limitations

This report does not claim runtime or sandbox execution and does not prove the absence of side effects.

Evidence chain

Follow the evidence from source binding to the install contract. Available evidence supports verification; it is not a safety guarantee.

Source

Binding unavailable
Artifact

Identity incomplete
Audit

Complete
Install contract

Open manifest to verify
Open manifest

Capabilities observed

Observed means this report recorded supporting evidence. Not recorded does not prove that a capability is absent.

Contains scripts

May execute code included with the Skill.

Not recorded by this audit

Network access

May connect to external services.

Observed in 3 evidence locations

Filesystem access

May read or write local files.

Not recorded by this audit

Env variables

May read values from the process environment.

Observed in 1 evidence location

External commands

May invoke commands or programs outside the Skill.

Observed in 36 evidence locations

Risk findings

Confirmed security concerns are separated from items that still need review.

Confirmed security concerns (1)

RISK-001 Low

references/sdk/azure-monitor-opentelemetry-ts.md:15

Environment Variable Example Reads a Connection String

The TypeScript quick start shows reading APPLICATIONINSIGHTS_CONNECTION_STRING from process.env. This is a standard Azure configuration pattern, but users should treat the value as sensitive and avoid exposing it in prompts or logs.

The environment variable access is real, but it appears only in an SDK documentation snippet. There is no evidence that the skill itself reads, stores, or transmits environment data.

Expert evidence

Immutable subject identity, scanner metadata, dismissed matches, and source-level evidence.

Artifact subject

Marketplace commit: Unavailable
Content hash: Unavailable
Tree hash: Unavailable
Skill path: Unavailable
Audit payload hash: Unavailable

Analysis metadata

Audit model: codex

Analysis state: Complete

Scope is limited to the recorded files, lines, methods, and evidence. No runtime or sandbox execution is claimed.

Static false positives ignored (4)

Low

Markdown Command Examples Misclassified as Execution

The static command findings are documentation examples for Azure CLI, MCP command names, package installation, and SDK quick starts. The files do not define executable scripts or invoke commands automatically, so these are false positives with normal user-action risk.

The flagged lines are markdown tables, fenced examples, package install commands, or SDK snippets. No executable wrapper, shell interpolation, or automatic command invocation was found.

Low

references/sdk/azure-monitor-ingestion-py.md:29 SKILL.md:104 SKILL.md:105

Azure Documentation Links and Endpoint Pattern Are Benign

The network findings are Azure documentation links and a placeholder Azure Monitor ingestion endpoint pattern. They do not send data, collect credentials, or direct traffic to an unknown third party.

The URLs point to Microsoft Learn pages or an Azure Monitor service endpoint template. No code path performs an outbound request from the skill.

Low

SKILL.md:3 SKILL.md:65 SKILL.md:71 SKILL.md:92

Weak Cryptography Alerts Are Textual False Positives

The weak cryptography detections map to ordinary text and KQL sort direction words, not cryptographic API usage. No DES, MD5, SHA1, or similar algorithm implementation was found in the reviewed files.

The cited lines are description text, KQL ordering clauses, and SDK reference prose. They contain no cryptographic operation or security-sensitive hashing behavior.

Low

SKILL.md:37-56 references/sdk/azure-monitor-opentelemetry-ts.md:15 SKILL.md:104-105

Critical Combination Heuristic Dismissed After Review

The combined command, network, and credential heuristic is not supported by semantic review. The evidence is split across markdown examples, Microsoft documentation links, and one standard environment-variable configuration sample.

The same suspicious categories exist only as passive guidance, not as coordinated behavior. No evidence found of obfuscation, hidden network calls, or automated credential access.

Verify and export

JSON report CITATION.cff SARIF 2.1.0 Signed installation manifest

The manifest and lockfile bind install artifacts to cryptographic hashes. This integrity claim is separate from the security assessment.

Audit attestation: not_attestable