Scanned skills

microsoft/azure-skills azure-upgrade

Checked the catalogued skill at azure-upgrade.

SkillTrust corpus scan 7 November 2026 v0.13.0 via skillsh Verify on GitHub
D AI-triaged 33
D Security

D; retained sample includes a high finding · SD-007 · what this rule accepts as a false positive →

D Permissions

D; retained sample includes a high finding · SD-003 · what this rule accepts as a false positive →

B Transparency

B set by findings not listed in the stored summary

showing 10 of 33
permission_hygienehigh SD-003
references/languages/java/rules/upgrade-strategy.md
securityhigh SD-007
references/languages/java/scripts/upgrade_bom.py
securityhigh SD-007
references/languages/java/scripts/upgrade_bom.py
securityhigh SD-007
references/languages/java/scripts/upgrade_bom.py
securityhigh SD-007
references/languages/java/scripts/upgrade_bom.py
securityhigh SD-007
references/languages/java/scripts/upgrade_bom.py
permission_hygienehigh SD-003
references/languages/java/templates/PROGRESS_TEMPLATE.md
permission_hygienehigh SD-003
references/languages/java/templates/PROGRESS_TEMPLATE.md
permission_hygienehigh SD-003
references/languages/java/templates/PROGRESS_TEMPLATE.md
permission_hygienehigh SD-003
references/languages/java/templates/PROGRESS_TEMPLATE.md
4 suppressed by AI triage
securitymedium SD-008 benign_example
references/languages/java/package-specific/com.microsoft.azure.eventprocessorhost.md

The snippet is documentation code with no base64 string, so the flag is a false positive.

transparencymedium SD-007 benign_example
references/services/functions/consumption-to-flex/linux/workflow.md

The file is documentation describing outbound network call patterns, not an executed call or configuration enabling such calls.

securityhigh SD-022 benign_example
references/services/functions/consumption-to-flex/windows/automation/app-creation.md

The file is documentation that merely references DNS exfiltration without containing any active code or configuration that would perform such activity.

securityhigh SD-022 benign_example
references/services/functions/consumption-to-flex/windows/automation/app-creation.md

The matched text is generic documentation, not actual DNS exfiltration code or configuration.