Skills
Navigate
skills/microsoft/skills/azure-prepare/Runlayer

azure-prepare

Warn

Audited by Runlayer on Feb 23, 2026

Risk Level: MEDIUM
Scan Summary
Max Score
78%
Files
87
Flagged
86
Chunks
89
Flagged Files (86)
SKILL.mdHIGH
78.3%

Malicious tool definition detected

Tool: SKILL.md Description: --- name: azure-prepare description: | Default entry point for Azure application development. Invoke this skill for ANY application work related to Azure: creating apps, building features, adding components, updating code, migrating, or modernizing.

references/analyze.mdHIGH
78.3%

Malicious tool definition detected

references/architecture.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/architecture.md Description: # Architecture Planning Select hosting stack and map components to Azure services.

references/plan-template.mdHIGH
78.3%

Malicious tool definition detected

references/recipe-selection.mdHIGH
78.3%

Malicious tool definition detected

references/recipes/azcli/README.mdHIGH
78.3%

Malicious tool definition detected

references/recipes/azcli/commands.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/recipes/azcli/commands.md Description: # Azure CLI Commands Common az commands for deployment workflows.

references/recipes/azcli/scripts.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/recipes/azcli/scripts.md Description: # Deployment Scripts Script templates for AZCLI deployments.

references/recipes/azd/README.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/recipes/azd/README.md Description: # AZD Recipe Azure Developer CLI workflow for preparing Azure deployments.

references/recipes/azd/azure-yaml.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/recipes/azd/azure-yaml.md Description: # azure.yaml Generation Create `azure.yaml` in project root for AZD.

references/recipes/azd/docker.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/recipes/azd/docker.md Description: # Dockerfile Generation Create Dockerfiles for containerized services.

references/recipes/azd/iac-rules.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/recipes/azd/iac-rules.md Description: # AZD IAC Rules Bicep rules for AZD projects.

references/recipes/azd/terraform.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/recipes/azd/terraform.md [1/2] Description: # AZD with Terraform Use Azure Developer CLI (azd) with Terraform as the infrastructure provider.

Tool: references/recipes/azd/terraform.md [2/2]

references/recipes/bicep/README.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/recipes/bicep/README.md Description: # Bicep Recipe Standalone Bicep workflow (without AZD).

references/recipes/bicep/patterns.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/recipes/bicep/patterns.md Description: # Bicep Patterns Common patterns for Bicep infrastructure templates.

references/recipes/terraform/README.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/recipes/terraform/README.md Description: # Terraform Recipe Terraform workflow for Azure deployments.

references/recipes/terraform/patterns.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/recipes/terraform/patterns.md Description: # Terraform Patterns Common patterns for Terraform Azure deployments.

references/region-availability.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/region-availability.md Description: # Azure Region Availability Index > **AUTHORITATIVE SOURCE** — Consult service-specific files BEFORE recommending any region.

references/requirements.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/requirements.md Description: # Requirements Gathering Collect project requirements through conversation before making architecture decisions.

references/research.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/research.md Description: # Research Components After architecture planning, research each selected component to gather best practices before generating artifacts.

references/runtimes/nodejs.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/runtimes/nodejs.md Description: # Node.js/Express Production Configuration for Azure Configure Express/Node.js applications for production deployment on Azure Container Apps and App Service.

references/scan.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/scan.md Description: # Codebase Scan Analyze workspace to identify components, technologies, and dependencies.

references/sdk/azd-deployment.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/sdk/azd-deployment.md Description: # Azure Developer CLI — Quick Reference > Condensed from **azd-deployment**.

references/sdk/azure-appconfiguration-java.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/sdk/azure-appconfiguration-java.md Description: # App Configuration — Java SDK Quick Reference > Condensed from **azure-appconfiguration-java**.

references/sdk/azure-appconfiguration-py.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/sdk/azure-appconfiguration-py.md Description: # App Configuration — Python SDK Quick Reference > Condensed from **azure-appconfiguration-py**.

references/sdk/azure-appconfiguration-ts.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/sdk/azure-appconfiguration-ts.md Description: # App Configuration — TypeScript SDK Quick Reference > Condensed from **azure-appconfiguration-ts**.

references/sdk/azure-identity-dotnet.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/sdk/azure-identity-dotnet.md Description: # Authentication — .NET SDK Quick Reference > Condensed from **azure-identity-dotnet**.

references/sdk/azure-identity-java.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/sdk/azure-identity-java.md Description: # Authentication — Java SDK Quick Reference > Condensed from **azure-identity-java**.

references/sdk/azure-identity-py.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/sdk/azure-identity-py.md Description: # Authentication — Python SDK Quick Reference > Condensed from **azure-identity-py**.

references/sdk/azure-identity-ts.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/sdk/azure-identity-ts.md Description: # Authentication — TypeScript SDK Quick Reference > Condensed from **azure-identity-ts**.

references/security.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/security.md [1/2] Description: # Security Hardening Secure Azure resources following Zero Trust principles.

Tool: references/security.md [2/2]

references/services/aks/README.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/services/aks/README.md Description: # Azure Kubernetes Service (AKS) Full Kubernetes orchestration for complex containerized workloads.

references/services/aks/addons.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/services/aks/addons.md Description: # AKS - Add-ons ## Container Monitoring ```bicep addonProfiles: { omsagent: { enabled: true config: { logAnalyticsWorkspaceResourceID: logAnalytics.id } } } ``` ## Azure CNI Networking ```bicep networkProfile: { networkPlugin: 'azure' networkPolicy: 'calico' } ``` ## Azure Key Vault Provider ```bicep addonProfiles: { azureKeyvaultSecretsProvider: {

references/services/aks/bicep.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/services/aks/bicep.md Description: # AKS - Bicep Patterns ## Cluster Resource ```bicep resource aks 'Microsoft.ContainerService/managedClusters@2023-07-01' = { name: '${resourcePrefix}-aks-${uniqueHash}' location: location identity: { type: 'SystemAssigned' } properties: { dnsPrefix: '${resourcePrefix}-aks' kubernetesVersion: '1.28' agentPoolProfiles: [ { name: 'default' count: 3 vmSize: 'Standard_DS2_v2' mode: 'System' osType: 'Linux' enableAutoScaling: true minCount: 1 maxCoun

references/services/aks/manifests.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/services/aks/manifests.md Description: # AKS - Kubernetes Manifests ## Deployment ```yaml apiVersion: apps/v1 kind: Deployment metadata: name: my-service spec: replicas: 3 selector: matchLabels: app: my-service template: metadata: labels: app: my-service spec: containers: - name: my-service image: myacr.azurecr.io/my-service:latest ports: - containerPort: 8080 resources: requests: memory: "128Mi" cpu: "100m" limits: memory: "256Mi" cpu: "500m" livenessProbe: httpGet: path: /heal

references/services/app-insights/README.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/services/app-insights/README.md Description: # App Insights Azure Application Insights for telemetry, monitoring, and APM.

references/services/app-service/README.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/services/app-service/README.md Description: # Azure App Service Hosting patterns and best practices for Azure App Service.

references/services/app-service/bicep.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/services/app-service/bicep.md Description: # App Service Bicep Patterns ## Basic Resource ```bicep resource appServicePlan 'Microsoft.Web/serverfarms@2022-09-01' = { name: '${resourcePrefix}-plan-${uniqueHash}' location: location sku: { name: 'B1' tier: 'Basic' } properties: { reserved: true // Linux } } resource webApp 'Microsoft.Web/sites@2022-09-01' = { name: '${resourcePrefix}-${serviceName}-${uniqueHash}' location: location properties: { serverFarmId: appServicePlan.id sit

references/services/app-service/deployment-slots.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/services/app-service/deployment-slots.md Description: # App Service Deployment Slots Zero-downtime deployments using staging slots.

references/services/app-service/scaling.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/services/app-service/scaling.md Description: # App Service Auto-scaling ## Basic Auto-scale Configuration ```bicep resource autoScale 'Microsoft.Insights/autoscalesettings@2022-10-01' = { name: '${webApp.name}-autoscale' location: location properties: { targetResourceUri: appServicePlan.id enabled: true profiles: [ { name: 'Auto scale' capacity: { minimum: '1' maximum: '10' default: '1' } rules: [ { metricTrigger: { metricName: 'CpuPercentage' metricResourceUri: appServicePlan.i

references/services/container-apps/README.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/services/container-apps/README.md Description: # Azure Container Apps Serverless container hosting for microservices, APIs, and background workers.

references/services/container-apps/bicep.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/services/container-apps/bicep.md Description: # Container Apps Bicep Patterns ## Basic Resource ```bicep resource containerApp 'Microsoft.App/containerApps@2023-05-01' = { name: '${resourcePrefix}-${serviceName}-${uniqueHash}' location: location properties: { environmentId: containerAppsEnvironment.id configuration: { ingress: { external: true targetPort: 8080 transport: 'auto' } secrets: [ { name: 'registry-password' value: containerRegistry.listCredentials().passwords[0].value

references/services/container-apps/environment.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/services/container-apps/environment.md Description: # Container Apps Environment Variables ## Standard Environment Variables ```bicep env: [ { name: 'APPLICATIONINSIGHTS_CONNECTION_STRING' value: applicationInsights.properties.ConnectionString } { name: 'AZURE_CLIENT_ID' value: managedIdentity.properties.clientId } ] ``` ## Secret References (Key Vault) Use secrets for sensitive values: ```bicep configuration: { secrets: [ { name: 'database-url' keyVaultUrl: 'https://myvault.vau

references/services/container-apps/health-probes.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/services/container-apps/health-probes.md Description: # Container Apps Health Probes Always configure health probes for production workloads.

references/services/container-apps/scaling.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/services/container-apps/scaling.md Description: # Container Apps Scaling Patterns ## HTTP-based Scaling Best for APIs and web applications: ```bicep scale: { minReplicas: 1 maxReplicas: 10 rules: [ { name: 'http-scaling' http: { metadata: { concurrentRequests: '100' } } } ] } ``` ## Queue-based Scaling Best for background workers: ```bicep scale: { minReplicas: 0 maxReplicas: 30 rules: [ { name: 'queue-scaling' azureQueue: { queueName: 'orders' queueLength: 10 auth: [ { secretRe

references/services/cosmos-db/README.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/services/cosmos-db/README.md Description: # Azure Cosmos DB Globally distributed, multi-model database for low-latency data at scale.

references/services/cosmos-db/bicep.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/services/cosmos-db/bicep.md Description: # Cosmos DB Bicep Patterns ## Account ```bicep resource cosmosAccount 'Microsoft.DocumentDB/databaseAccounts@2023-04-15' = { name: '${resourcePrefix}-cosmos-${uniqueHash}' location: location kind: 'GlobalDocumentDB' properties: { databaseAccountOfferType: 'Standard' locations: [ { locationName: location failoverPriority: 0 isZoneRedundant: false } ] consistencyPolicy: { defaultConsistencyLevel: 'Session' } capabilities: [ { name: 'EnableS

references/services/cosmos-db/partitioning.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/services/cosmos-db/partitioning.md Description: # Cosmos DB Partition Key Selection ## Good Partition Keys A good partition key should have: - **High cardinality** - Many distinct values - **Even data distribution** - No hot partitions - **Even request distribution** - Balanced workload - **Used in most queries** - Enables efficient routing ## Examples by Scenario | Scenario | Partition Key | Reason | |----------|---------------|--------| | User-centric data | `/userId` | Querie

references/services/cosmos-db/sdk.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/services/cosmos-db/sdk.md Description: # Cosmos DB SDK Connection Patterns ## Node.js ```javascript const { CosmosClient } = require("@azure/cosmos"); const client = new CosmosClient(process.env.COSMOS_CONNECTION_STRING); const database = client.database("appdb"); const container = database.container("items"); // Query example const { resources } = await container.items .query("SELECT * FROM c WHERE c.userId = @userId", { parameters: [{ name: "@userId", value: userId }] }) .fetc

references/services/event-grid/README.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/services/event-grid/README.md Description: # Azure Event Grid Serverless event routing for event-driven architectures.

references/services/event-grid/bicep.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/services/event-grid/bicep.md Description: # Event Grid - Bicep Patterns ## Custom Topic ```bicep resource eventGridTopic 'Microsoft.EventGrid/topics@2023-12-15-preview' = { name: '${resourcePrefix}-egt-${uniqueHash}' location: location properties: { inputSchema: 'EventGridSchema' publicNetworkAccess: 'Enabled' } } ``` ## System Topic (Azure Resource Events) ```bicep resource storageSystemTopic 'Microsoft.EventGrid/systemTopics@2023-12-15-preview' = { name: '${resourcePrefix}-sto

references/services/event-grid/subscriptions.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/services/event-grid/subscriptions.md Description: # Event Grid - Subscriptions ## Event Subscription ```bicep resource eventGridSubscription 'Microsoft.EventGrid/topics/eventSubscriptions@2023-12-15-preview' = { parent: eventGridTopic name: 'order-processor-subscription' properties: { destination: { endpointType: 'WebHook' properties: { endpointUrl: 'https://my-api.azurecontainerapps.io/webhooks/orders' } } filter: { includedEventTypes: [ 'Order.Created' 'Order.Updated' ] } retr

references/services/foundry/README.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/services/foundry/README.md Description: # Azure AI Foundry Azure AI Foundry (formerly Azure OpenAI) for building AI-powered applications with models like GPT-4o, GPT-4, and embeddings.

references/services/foundry/region-availability.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/services/foundry/region-availability.md Description: # Foundry Region Availability ⚠️ **Very limited — varies by model** | Region | GPT-4o | GPT-4 | GPT-3.5 | Embeddings | |--------|:------:|:-----:|:-------:|:----------:| | `eastus` | ✅ | ✅ | ✅ | ✅ | | `eastus2` | ✅ | ✅ | ✅ | ✅ | | `westus` | ⚠️ | ⚠️ | ✅ | ✅ | | `westus3` | ✅ | ⚠️ | ✅ | ✅ |

references/services/functions/README.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/services/functions/README.md Description: # Azure Functions Serverless compute for event-driven workloads, APIs, and scheduled tasks.

references/services/functions/bicep.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/services/functions/bicep.md Description: # Functions Bicep Patterns ## Flex Consumption (Recommended) **Use Flex Consumption for new deployments with managed identity (no connection strings).** ```bicep resource storageAccount 'Microsoft.Storage/storageAccounts@2023-01-01' = { name: '${resourcePrefix}func${uniqueHash}' location: location sku: { name: 'Standard_LRS' } kind: 'StorageV2' properties: { minimumTlsVersion: 'TLS1_2' allowBlobPublicAccess: false allowSharedKeyAccess: fa

references/services/functions/durable.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/services/functions/durable.md Description: # Durable Functions Long-running orchestrations with checkpointing and state management.

references/services/functions/templates/README.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/services/functions/templates/README.md Description: # Azure Functions Templates AZD template selection for Azure Functions deployments.

references/services/functions/templates/http.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/services/functions/templates/http.md Description: # HTTP Function Templates Default templates for HTTP-triggered Azure Functions.

references/services/functions/templates/integrations.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/services/functions/templates/integrations.md Description: # Integration Templates Templates for Azure Functions with specific service integrations.

references/services/functions/templates/mcp.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/services/functions/templates/mcp.md Description: # MCP Server Templates Templates for hosting MCP (Model Context Protocol) servers on Azure Functions.

references/services/functions/templates/selection.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/services/functions/templates/selection.md Description: # Template Selection Decision Tree **CRITICAL**: Check for specific integration indicators IN ORDER before defaulting to HTTP.

references/services/functions/triggers.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/services/functions/triggers.md Description: # Function Triggers ## HTTP Trigger ```javascript module.exports = async function (context, req) { context.res = { body: "Hello from Azure Functions" }; }; ``` ## Timer Trigger ```json // function.json { "bindings": [{ "name": "timer", "type": "timerTrigger", "schedule": "0 */5 * * * *" }] } ``` Cron format: `{second} {minute} {hour} {day} {month} {day-of-week}` ## Service Bus Trigger (Managed Identity) ### Python (v2 model) ```python

references/services/key-vault/README.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/services/key-vault/README.md Description: # Azure Key Vault Centralized secrets, keys, and certificate management.

references/services/key-vault/bicep.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/services/key-vault/bicep.md Description: # Key Vault - Bicep Patterns ## Basic Vault ```bicep resource keyVault 'Microsoft.KeyVault/vaults@2023-07-01' = { name: '${resourcePrefix}-kv-${uniqueHash}' location: location properties: { tenantId: subscription().tenantId sku: { family: 'A' name: 'standard' } enableRbacAuthorization: true enableSoftDelete: true softDeleteRetentionInDays: 90 enablePurgeProtection: true } } ``` ## Storing Secrets ```bicep resource secret 'Microsoft.KeyVau

references/services/key-vault/sdk.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/services/key-vault/sdk.md Description: # Key Vault - SDK Patterns ## Node.js ```javascript const { SecretClient } = require("@azure/keyvault-secrets"); const { DefaultAzureCredential } = require("@azure/identity"); const client = new SecretClient( process.env.KEY_VAULT_URL, new DefaultAzureCredential() ); const secret = await client.getSecret("database-connection-string"); console.log(secret.value); ``` ## Python ```python from azure.keyvault.secrets import SecretClient from azu

references/services/logic-apps/README.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/services/logic-apps/README.md Description: # Azure Logic Apps Low-code workflow automation and integration platform.

references/services/logic-apps/bicep.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/services/logic-apps/bicep.md Description: # Logic Apps - Bicep Patterns ## Consumption (Multi-tenant) ```bicep resource logicApp 'Microsoft.Logic/workflows@2019-05-01' = { name: '${resourcePrefix}-logic-${uniqueHash}' location: location properties: { state: 'Enabled' definition: { '$schema': 'https://schema.management.azure.com/providers/Microsoft.Logic/schemas/2016-06-01/workflowdefinition.json#' contentVersion: '1.0.0.0' triggers: { manual: { type: 'Request' kind: 'Http' input

references/services/logic-apps/triggers.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/services/logic-apps/triggers.md Description: # Logic Apps - Triggers ## HTTP Request ```json { "triggers": { "manual": { "type": "Request", "kind": "Http", "inputs": { "schema": { "type": "object", "properties": { "orderId": { "type": "string" } } } } } } } ``` ## Recurrence (Schedule) ```json { "triggers": { "Recurrence": { "type": "Recurrence", "recurrence": { "frequency": "Hour", "interval": 1 } } } } ``` ## Service Bus Queue ```json { "triggers": { "When_a_message_is_receive

references/services/service-bus/README.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/services/service-bus/README.md Description: # Azure Service Bus Enterprise messaging with queues and pub/sub topics.

references/services/service-bus/bicep.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/services/service-bus/bicep.md Description: # Service Bus - Bicep Patterns ## Namespace ```bicep resource serviceBus 'Microsoft.ServiceBus/namespaces@2022-10-01-preview' = { name: '${resourcePrefix}-sb-${uniqueHash}' location: location sku: { name: 'Standard' tier: 'Standard' } } ``` ## Queue ```bicep resource queue 'Microsoft.ServiceBus/namespaces/queues@2022-10-01-preview' = { parent: serviceBus name: 'orders' properties: { maxDeliveryCount: 10 deadLetteringOnMessageExpiration:

references/services/service-bus/patterns.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/services/service-bus/patterns.md Description: # Service Bus - Messaging Patterns ## Point-to-Point (Queue) ``` Producer → Queue → Consumer ``` Use for: Work distribution, command processing ## Pub/Sub (Topic + Subscriptions) ``` Publisher → Topic → Subscription A → Consumer A → Subscription B → Consumer B ``` Use for: Event broadcasting, multiple consumers ## SDK Patterns ### Managed Identity (Recommended) #### Node.js ```javascript const { ServiceBusClient } = require("@azure/s

references/services/sql-database/README.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/services/sql-database/README.md Description: # Azure SQL Database Managed relational database with ACID compliance and full SQL Server compatibility.

references/services/sql-database/auth.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/services/sql-database/auth.md Description: # SQL Database - Entra ID Authentication ## Entra ID Admin Configuration ```bicep resource sqlServer 'Microsoft.Sql/servers@2022-05-01-preview' = { name: '${resourcePrefix}-sql-${uniqueHash}' location: location properties: { administrators: { administratorType: 'ActiveDirectory' principalType: 'Group' login: 'SQL Admins' sid: entraGroupObjectId tenantId: subscription().tenantId azureADOnlyAuthentication: true }

references/services/sql-database/bicep.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/services/sql-database/bicep.md Description: # SQL Database - Bicep Patterns ## Basic Setup ```bicep resource sqlServer 'Microsoft.Sql/servers@2022-05-01-preview' = { name: '${resourcePrefix}-sql-${uniqueHash}' location: location properties: { administratorLogin: 'sqladmin' administratorLoginPassword: sqlAdminPassword minimalTlsVersion: '1.2' } } resource sqlDatabase 'Microsoft.Sql/servers/databases@2022-05-01-preview' = { parent: sqlServer name: 'appdb' location: location sku: {

references/services/sql-database/sdk.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/services/sql-database/sdk.md Description: # SQL Database - SDK Patterns ## Node.js (mssql) ```javascript const sql = require('mssql'); const config = { server: process.env.SQL_SERVER, database: process.env.SQL_DATABASE, authentication: { type: 'azure-active-directory-default' }, options: { encrypt: true } }; const pool = await sql.connect(config); ``` ## Python (pyodbc) ```python import pyodbc from azure.identity import DefaultAzureCredential

references/services/static-web-apps/README.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/services/static-web-apps/README.md Description: # Azure Static Web Apps Serverless hosting for static sites and SPAs with integrated APIs.

references/services/static-web-apps/bicep.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/services/static-web-apps/bicep.md Description: # Static Web Apps - Bicep Patterns ## Basic Resource ```bicep resource staticWebApp 'Microsoft.Web/staticSites@2022-09-01' = { name: '${resourcePrefix}-${serviceName}-${uniqueHash}' location: location sku: { name: 'Standard' tier: 'Standard' } properties: { buildProperties: { appLocation: '/' apiLocation: 'api' outputLocation: 'dist' } } } ``` ## Custom Domain

references/services/static-web-apps/deployment.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/services/static-web-apps/deployment.md Description: # Static Web Apps - Deployment ## azd Deploy (Default) Standard deployment via Azure Developer CLI: ```bash azd deploy ``` ## GitHub-Linked Deployments For CI/CD builds on Azure (instead of azd deploy): ```bicep properties: { repositoryUrl: 'https://github.com/owner/repo' branch: 'main' buildProperties: { appLocation: 'src' apiLocation: 'api' outputLocation: 'dist'

references/services/static-web-apps/region-availability.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/services/static-web-apps/region-availability.md Description: # SWA Region Availability ⚠️ **NOT available in many common regions** — Check before deployment.

references/services/static-web-apps/routing.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/services/static-web-apps/routing.md Description: # Static Web Apps - Routing & Authentication ## Route Configuration Create `staticwebapp.config.json` in the app root: ```json { "routes": [ { "route": "/api/*", "allowedRoles": ["authenticated"] } ], "navigationFallback": { "rewrite": "/index.html", "exclude": ["/api/*", "/*.{png,jpg,gif}"] }, "responseOverrides": { "404": { "rewrite": "/404.html" } } } ``` ## Authentication ### Built-in Providers ```json { "routes": [ { "route":

references/services/storage/README.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/services/storage/README.md Description: # Azure Storage Scalable cloud storage for blobs, files, queues, and tables.

references/services/storage/access.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/services/storage/access.md Description: # Storage - Access Patterns ## Managed Identity Role Assignment ```bicep resource storageRoleAssignment 'Microsoft.Authorization/roleAssignments@2022-04-01' = { name: guid(storageAccount.id, principalId, 'Storage Blob Data Contributor') scope: storageAccount properties: { roleDefinitionId: subscriptionResourceId('Microsoft.Authorization/roleDefinitions', 'ba92f5b4-2d11-453d-a403-e96b0029c9fe') principalId: principalId principalType: 'Servi

references/services/storage/bicep.mdHIGH
78.3%

Malicious tool definition detected

Tool: references/services/storage/bicep.md Description: # Storage - Bicep Patterns ## Storage Account ```bicep resource storageAccount 'Microsoft.Storage/storageAccounts@2023-01-01' = { name: '${resourcePrefix}stor${uniqueHash}' location: location sku: { name: 'Standard_LRS' } kind: 'StorageV2' properties: { accessTier: 'Hot' allowBlobPublicAccess: false minimumTlsVersion: 'TLS1_2' supportsHttpsTrafficOnly: true } } ``` ## Blob Container ```bicep resource blobService 'Microsoft.Storage/storageAc

references/generate.mdMEDIUM
46.4%

Tool passed security scan

references/azure-context.mdMEDIUM
45.9%

Tool passed security scan

Passed Files (1)Click to expand
references/global-rules.mdOK
17.3%

Tool passed security scan

Audit Metadata
Max File Score
78%
Classification
KNOWN_SERVER_KNOWN_TOOL_LIST
Files Scanned
87
Files Flagged
86
Chunks Analyzed
89
Analyzed
Feb 23, 2026, 06:27 AM
Security Audit — runlayer — azure-prepare