Scanned skills

microsoft/azure-skills azure-app-onboard

Checked the catalogued skill at azure-app-onboard.

SkillTrust corpus scan 22 September 2026 v0.10.0 via skillsh Verify on GitHub
F AI-triaged 62
GitHub
D Security

D; retained sample includes a high finding · SD-007 · what this rule accepts as a false positive →

F Permissions

F; retained sample includes a high finding · SD-003 · what this rule accepts as a false positive →

B Transparency

B; retained sample includes a medium finding · SD-007 · what this rule accepts as a false positive →

showing 10 of 62
permission_hygienehigh SD-003
deploy/SKILL.md
permission_hygienehigh SD-003
deploy/SKILL.md
permission_hygienehigh SD-003
deploy/references/blocked-patterns.md
permission_hygienehigh SD-003
deploy/references/code-deployment-container-apps.md
permission_hygienehigh SD-003
deploy/references/code-deployment-swa.md
securityhigh SD-007
deploy/references/deploy-checklist-template.md
permission_hygienehigh SD-003
deploy/references/error-classification.md
permission_hygienehigh SD-003
deploy/references/error-classification.md
securityhigh SD-007
deploy/references/health-check-patterns.md
transparencymedium SD-007
deploy/references/health-check-patterns.md
2 suppressed by AI triage
securitymedium SD-012 benign_example
deploy/references/code-deployment-appservice.md

The line merely advises against pre-installing packages locally; no post-install script or lifecycle hook is present.

permission_hygienehigh SD-003 benign_example
deploy/references/subagent-preflight.md

The relative path [REDACTED] is within the repository and does not escape the skill directory.