Skip to content
skillsafebeta
← Report library
Purpose / Other

Azure Messaging Skill Security Audit

What the author says it does (original text)

Troubleshoot and resolve issues with Azure Messaging SDKs for Event Hubs and Service Bus. Covers connection failures, authentication errors, message processing issues, and SDK configuration problems. WHEN: event hub SDK error, service bus SDK issue, messaging connection failure, AMQP error, event processor host issue, message lock lost, message lock expired, lock renewal, lock renewal batch, send

Independent security check

Security risks found

Files checked
1
Risks found
1
Could it run dangerous commands?Looks for programs run straight after downloading, remote control of your computer, and hidden commands.No risks found
Could it expose your files or keys?Looks for uploads of files containing passwords or keys, and keys written directly in the code.No risks found
Could it delete files or keep running?Looks for broad file deletion, disk overwrites, and programs set to start automatically.No risks found
Could it bypass safety checks?Looks for skipped website security checks, excessive file access, or actions that skip your approval.Risks found: 1
Medium risk

“Apply remediation” may change Azure configuration without confirming scope

Source references: 2
What we found

The workflow moves directly from diagnosis to “Apply remediation” without limiting the action to advice, identifying which resources may change, or requiring user confirmation before invoking tools capable of changing cloud resources. No concrete remediation command is shown here, so the risk depends on the agent’s interpretation and the external azure-diagnostics guidance.

Why this matters

If remediation affects connections, retries, queues, topics, consumer groups, or other cloud settings, the agent could make an unapproved production messaging change, causing processing interruption, duplicate messages, or configuration drift.

What this evidence establishes

“Recommend fix — Apply remediation” is ambiguous: it could mean performing a fix or merely recommending one. The file provides no write command, target resource, authorization scope, or confirmation step, so the evidence does not establish that Azure configuration would be changed. The documented tool uses mainly list resources, query logs, and check health, with no explicit mutation shown. A user can ask the author to separate advice from execution and require target disclosure and confirmation before any cloud write.

This assessment concerns the code and conditions shown, not proof that harm has occurred.
SKILL.md:47In the instructionsOpen original file
4. **Look up documentation** — Use `mcp_azure_mcp_documentation` to search Microsoft Learn for the error or topic5. **Check configuration** — Verify connection string, entity name, consumer group6. **Recommend fix** — Apply remediation, citing documentation found
Show 1 other places
SKILL.md:35In the instructionsOpen original file
|------|---------|-----|| `mcp_azure_mcp_eventhubs` | Namespace/hub ops | List namespaces, hubs, consumer groups || `mcp_azure_mcp_servicebus` | Queue/topic ops | List namespaces, queues, topics, subscriptions || `mcp_azure_mcp_monitor` | `logs_query` | Query diagnostic logs with KQL || `mcp_azure_mcp_resourcehealth` | `get` | Check service health status || `mcp_azure_mcp_documentation` | Doc search | Search Microsoft Learn for troubleshooting docs |
Could it mislead the AI or hide text?Checks the skill instructions for requests to ignore you, influence the report, or hide text in invisible characters.No risks found
Could it change links or payment recipients without asking?Looks for forced referral or payment changes combined with instructions to hide the change.No risks found

Inside this skill

6 instruction sections

The Skill is intended to diagnose Azure Event Hubs and Service Bus connection, authentication, and message-processing problems, and states that Azure MCP tools are used to read namespaces, queues, topics, subscriptions, diagnostic logs, and resource health.

View source
SKILL.md:35In the instructionsOpen original file
|------|---------|-----|| `mcp_azure_mcp_eventhubs` | Namespace/hub ops | List namespaces, hubs, consumer groups || `mcp_azure_mcp_servicebus` | Queue/topic ops | List namespaces, queues, topics, subscriptions || `mcp_azure_mcp_monitor` | `logs_query` | Query diagnostic logs with KQL || `mcp_azure_mcp_resourcehealth` | `get` | Check service health status || `mcp_azure_mcp_documentation` | Doc search | Search Microsoft Learn for troubleshooting docs |

The diagnostic workflow checks resource health and errors, verifies the connection string, entity name, and consumer group, and then recommends and applies remediation. The supplied text does not specify obtaining user confirmation before applying a fix.

View source
SKILL.md:43In the instructionsOpen original file
1. **Identify the SDK and version** — Check the prompt for SDK and version clues; if not stated, proceed with diagnosis and ask later if needed2. **Check resource health** — Use `mcp_azure_mcp_resourcehealth` to verify the namespace is healthy3. **Review the error message** — Match against language-specific troubleshooting guide4. **Look up documentation** — Use `mcp_azure_mcp_documentation` to search Microsoft Learn for the error or topic5. **Check configuration** — Verify connection string, entity name, consumer group6. **Recommend fix** — Apply remediation, citing documentation found

The Skill relies on troubleshooting guides in another Skill named azure-diagnostics, but those guides are not included in the supplied complete source, so their specific instructions cannot be audited from this evidence.

View source
SKILL.md:51In the instructionsOpen original file
## Troubleshooting GuidesConnectivity, SDK, and auth troubleshooting guides are located in the azure-diagnostics skill under `troubleshooting/messaging/`.
Start here · InstructionsSKILL.md
azure-messaging
Lines connect the instruction file to its sections, not an observed execution order. Select a section to read the source.
Files and check records1 files

Coverage and gaps

Content covered in each file

These are the source ranges included in this check, not a guarantee that every issue has been resolved.

  • SKILL.mdFull text included

This report is for the version above. We read the available code and instructions without running the skill or checking extra packages it installs. This is not a promise of safety: a different version or setup may behave differently.

  • SKILL.mdInstructions
Lines read
57
File checksum (to compare versions)
e6e8576b1bc7deb398dbfc96d7e36d5d79bb90230ccd8fe4956c9c532094ddd5