microsoft/azure-skills azure-compute

Checked the catalogued skill at azure-compute.

SkillTrust corpus scan 22 September 2026 v0.10.0 via skillsh Verify on GitHub

F AI-triaged 16

D Security

D; retained sample includes a high finding · SD-007 · what this rule accepts as a false positive →

F Permissions

F; retained sample includes a critical finding · SD-004 · what this rule accepts as a false positive →

B Transparency

B; retained sample includes a medium finding · SD-007 · what this rule accepts as a false positive →

showing 10 of 16

transparencymedium SD-007

references/retail-prices-api.md

transparencymedium SD-007

references/retail-prices-api.md

transparencymedium SD-007

references/retail-prices-api.md

transparencymedium SD-007

references/retail-prices-api.md

permission_hygienecritical SD-004

workflows/vm-creator/examples/bicep/README.md

permission_hygienecritical SD-004

workflows/vm-creator/examples/bicep/README.md

securityhigh SD-007

workflows/vm-creator/examples/terraform/README.md

permission_hygienecritical SD-004

workflows/vm-creator/examples/terraform/README.md

permission_hygienecritical SD-004

workflows/vm-creator/examples/terraform/README.md

permission_hygienecritical SD-004

workflows/vm-creator/examples/terraform/README.md

3 suppressed by AI triage

securitymedium SD-008 benign_example

workflows/capacity-reservation/references/capacity-reservation-overview.md

The content is a legitimate Azure CLI query, not a base64 obfuscation; the scanner likely misidentified the query string.

securitymedium SD-008 benign_example

workflows/essential-machine-management/references/emm-prerequisites.md

The base64 string is merely a list of Azure permissions, not an executable payload.

permission_hygienecritical SD-004 benign_example

workflows/vm-creator/references/delivery-options/save-local.md

The file is documentation showing how to read a public key, not actual credential exfiltration.