azure-aigateway

Warn

Audited by Runlayer on Feb 22, 2026

Risk Level: MEDIUM
Scan Summary
Max Score
78%
Files
5
Flagged
5
Chunks
7
Flagged Files (5)
SKILL.mdHIGH
78.3%

Malicious tool definition detected

Tool: SKILL.md [1/3] Description: --- name: azure-aigateway description: | Configure Azure API Management (APIM) as AI Gateway to secure, observe, control AI models, MCP servers, agents.

Tool: SKILL.md [2/3] Description: 429 || context.Response.StatusCode == 503)"> <set-backend-service backend-id="{backend-pool-id}" /> <forward-request buffer-request-body="true" /> </retry> </backend> <on-error> <when condition="@(context.Response.StatusCode == 503)"> <return-response> <set-status code="503" reason="Service Unavailable" /> </return-response> </when> </on-error> </policies> ``` ## Pattern 8: Add AI Foundry Model Behind Gateway When user asks to "add my model behind gateway", firs

Description: ```bash # Enable MCP server capability (via ARM/Bicep or Portal) # Note: MCP configuration is done via APIM policies and product configuration ``` ### Step 6: Configure MCP Endpoint for API Create an MCP-compatible endpoint that exposes your API operations as tools: ```xml <policies> <inbound> <base /> <!-- MCP tools/list endpoint handler --> <choose> <when condition="@(context.Request.Url.Path.EndsWith("/mcp/tools/list"))"> <return-response> <set-status code="200" reason="OK" /> <s

references/sdk/azure-ai-contentsafety-py.mdHIGH
78.3%

Malicious tool definition detected

references/sdk/azure-ai-contentsafety-ts.mdHIGH
78.3%

Malicious tool definition detected

references/sdk/azure-mgmt-apimanagement-dotnet.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/sdk/azure-mgmt-apimanagement-dotnet.md Description: # API Management — .NET SDK Quick Reference > Condensed from **azure-mgmt-apimanagement-dotnet**.

references/sdk/azure-mgmt-apimanagement-py.mdHIGH
78.3%

Malicious tool definition detected

Audit Metadata
Max File Score
78%
Classification
UNKNOWN_SERVER
Files Scanned
5
Files Flagged
5
Chunks Analyzed
7
Analyzed
Feb 22, 2026, 01:04 AM
Security Audit — runlayer — azure-aigateway