Scanned skills

microsoft/azure-skills azure-compute

Checked the catalogued skill at azure-compute.

SkillTrust corpus scan 7 November 2026 v0.13.0 via skillsh Verify on GitHub
F AI-triaged 14
D Security

D; retained sample includes a high finding · SD-007 · what this rule accepts as a false positive →

F Permissions

F; retained sample includes a critical finding · SD-004 · what this rule accepts as a false positive →

B Transparency

B; retained sample includes a medium finding · SD-007 · what this rule accepts as a false positive →

showing 10 of 14
transparencymedium SD-007
references/retail-prices-api.md
transparencymedium SD-007
references/retail-prices-api.md
permission_hygienecritical SD-004
workflows/vm-creator/examples/bicep/README.md
permission_hygienecritical SD-004
workflows/vm-creator/examples/bicep/README.md
securityhigh SD-007
workflows/vm-creator/examples/terraform/README.md
permission_hygienecritical SD-004
workflows/vm-creator/examples/terraform/README.md
permission_hygienecritical SD-004
workflows/vm-creator/examples/terraform/README.md
permission_hygienecritical SD-004
workflows/vm-creator/examples/terraform/README.md
securityhigh SD-007
workflows/vm-creator/references/depth-probe/beginner.md
securityhigh SD-007
workflows/vm-creator/references/depth-probe/networking-deep.md
5 suppressed by AI triage
transparencymedium SD-007 benign_example
references/retail-prices-api.md

Placeholder config file with no actual outbound network call.

transparencymedium SD-007 benign_example
references/retail-prices-api.md

The file is documentation, not executable code; the referenced outbound call is only noted in prose and not an actual configuration.

securitymedium SD-008 benign_example
workflows/capacity-reservation/references/capacity-reservation-overview.md

The code snippet contains no Base64-encoded string; the flagged content is a normal Azure CLI query.

securitymedium SD-008 benign_example
workflows/essential-machine-management/references/emm-prerequisites.md

The flagged content is a list of Azure permission identifiers, not a Base64‑encoded payload, and contains no malicious code.

permission_hygienecritical SD-004 benign_example
workflows/vm-creator/references/delivery-options/save-local.md

The file is documentation that only references the public key path for legitimate use, not indicating malicious activity.