skillhash

Is azure-ai safe?

Grade A, 100/100. No meaningful risk found.

Use for Azure AI: Search, Speech, OpenAI, Document Intelligence. Helps with search, vector/hybrid search, speech-to-text, text-to-speech, transcription, OCR. WHEN: AI Search, query search, vector search, hybrid search, semantic search, speech-to-text, text-to-speech, transcribe, OCR, convert text to speech.

microsoft/azure-skills/.github/plugins/azure-skills/skills/azure-ai 1.6kChecked 3h agoContent last changed 3h ago
A

azure-ai

.github/plugins/azure-skills/skills/azure-ai
100/100 · No meaningful risk foundNo security findings

Use for Azure AI: Search, Speech, OpenAI, Document Intelligence. Helps with search, vector/hybrid search, speech-to-text, text-to-speech, transcription, OCR. WHEN: AI Search, query search, vector search, hybrid search, semantic search, speech-to-text, text-to-speech, transcribe, OCR, convert text to speech.

Content hash
sha256:40b66b0a9ac9ec5bc586f16be6c968378aee04c01e9cc2ae141fedb8f536981a
Files
16
Quality
100/100

Security findings

  • infoUnpinned package installSL501 · .github/plugins/azure-skills/skills/azure-ai/references/sdk/azure-ai-contentsafety-py.md:8
    pip install azure-ai-contentsafety

    Installing without a version means a future malicious release lands automatically. Fix: Pin an exact version (pkg==1.2.3, pkg@1.2.3). Severity lowered: the line reads as documentation, not an instruction.

  • infoUnpinned package installSL501 · .github/plugins/azure-skills/skills/azure-ai/references/sdk/azure-ai-transcription-py.md:8
    pip install azure-ai-transcription

    Installing without a version means a future malicious release lands automatically. Fix: Pin an exact version (pkg==1.2.3, pkg@1.2.3). Severity lowered: the line reads as documentation, not an instruction.

  • infoUnpinned package installSL501 · .github/plugins/azure-skills/skills/azure-ai/references/sdk/azure-ai-translation-text-py.md:8
    pip install azure-ai-translation-text

    Installing without a version means a future malicious release lands automatically. Fix: Pin an exact version (pkg==1.2.3, pkg@1.2.3). Severity lowered: the line reads as documentation, not an instruction.

  • infoUnpinned package installSL501 · .github/plugins/azure-skills/skills/azure-ai/references/sdk/azure-ai-vision-imageanalysis-py.md:8
    pip install azure-ai-vision-imageanalysis

    Installing without a version means a future malicious release lands automatically. Fix: Pin an exact version (pkg==1.2.3, pkg@1.2.3). Severity lowered: the line reads as documentation, not an instruction.

Files in this skill
  • SKILL.md3.3 KB
  • references/auth-best-practices.md6.1 KB
  • references/sdk/azure-ai-contentsafety-java.md1.4 KB
  • references/sdk/azure-ai-contentsafety-py.md1.3 KB
  • references/sdk/azure-ai-contentsafety-ts.md1.4 KB
  • references/sdk/azure-ai-document-intelligence-dotnet.md1.4 KB
  • references/sdk/azure-ai-document-intelligence-ts.md1.5 KB
  • references/sdk/azure-ai-openai-dotnet.md1.4 KB
  • references/sdk/azure-ai-transcription-py.md1.2 KB
  • references/sdk/azure-ai-translation-text-py.md1.3 KB
  • references/sdk/azure-ai-translation-ts.md1.3 KB
  • references/sdk/azure-ai-vision-imageanalysis-java.md1.3 KB
  • references/sdk/azure-ai-vision-imageanalysis-py.md1.3 KB
  • references/sdk/azure-search-documents-dotnet.md1.3 KB
  • references/sdk/azure-search-documents-py.md1.5 KB
  • references/sdk/azure-search-documents-ts.md1.2 KB

Questions about azure-ai

Is azure-ai safe to install?
Our scanner gave azure-ai grade A (100/100): no meaningful risk found. None of the 30 security rules matched. Static analysis cannot prove safety, so pin the reviewed revision with a lockfile.
How do I install azure-ai in Claude Code or Codex?
Run skillhash add github:microsoft/azure-skills/.github/plugins/azure-skills/skills/azure-ai. It downloads the exact commit, checks the grade against your policy, writes skills.lock and installs it into .claude/skills and .agents/skills.
What happens if azure-ai changes upstream?
Its content hash changes. skillhash verify fails in CI until you review the new version and update the lock. With a watch, you also get an alert.

More from microsoft/azure-skills