skillhash

Is foundry-iq safe?

Grade C, 74/100. Review before installing.

Foundry IQ knowledge bases. WHEN: make local or Blob documents searchable; create/diagnose KBs; triage unsupported connectors or multi-source KB creation/reconfiguration (even with classic-search terms); connect existing KB to agents (including multi-source KBs); create/reuse a Search service; retrieve from an existing knowledge base with citations; no brand words needed. Read its procedure before query/target questions. NOT: other KB providers, repository-file search, classic Azure AI Search index/query/app work with no Foundry IQ KB or connector request, generic agent creation.

microsoft/azure-skills/.github/plugins/foundry-iq-skills/skills/foundry-iq 1.6kChecked 4h agoContent last changed 4h ago
C

foundry-iq

.github/plugins/foundry-iq-skills/skills/foundry-iq
74/100 · Review before installing1 high2 low

Foundry IQ knowledge bases. WHEN: make local or Blob documents searchable; create/diagnose KBs; triage unsupported connectors or multi-source KB creation/reconfiguration (even with classic-search terms); connect existing KB to agents (including multi-source KBs); create/reuse a Search service; retrieve from an existing knowledge base with citations; no brand words needed. Read its procedure before query/target questions. NOT: other KB providers, repository-file search, classic Azure AI Search index/query/app work with no Foundry IQ KB or connector request, generic agent creation.

Content hash
sha256:7821481d91867610ef907ddbabbebb4f80362d92d8923acc25d123bb470f0254
Files
85
Quality
100/100

Security findings

  • highReads credential filesSL201 · .github/plugins/foundry-iq-skills/skills/foundry-iq/helpers/_file_inventory.py:92
    or lowered[-1] in {"id_rsa", "id_dsa", "id_ecdsa", "id_ed25519"}

    The skill references files that hold private keys or cloud credentials. Fix: Skills should never need raw credentials. Use the tool's own auth flow or ask the user to provide a scoped token.

  • lowHides actions from the userSL102 · .github/plugins/foundry-iq-skills/skills/foundry-iq/SKILL.md:42
    Do not silently execute only the supported part of a compound request.

    The skill asks the agent to act without the user's knowledge. Fix: Every side effect should be visible to the user. Remove the concealment instruction. Severity lowered: the line reads as documentation, not an instruction.

  • lowHides actions from the userSL102 · .github/plugins/foundry-iq-skills/skills/foundry-iq/references/cu-ingestion.md:105
    never ask the user to configure them manually.

    The skill asks the agent to act without the user's knowledge. Fix: Every side effect should be visible to the user. Remove the concealment instruction. Severity lowered: the line reads as documentation, not an instruction.

  • infoUnpinned package installSL501 · .github/plugins/foundry-iq-skills/skills/foundry-iq/agents/create-missing-agent.md:37
    npx skills add https://github.com/microsoft/azure-skills --skill microsoft-foundry

    Installing without a version means a future malicious release lands automatically. Fix: Pin an exact version (pkg==1.2.3, pkg@1.2.3). Severity lowered: the line reads as documentation, not an instruction.

Files in this skill
  • SKILL.md3.7 KB
  • agents/connect-hosted-toolbox.md7.8 KB
  • agents/connect-hosted.md7.8 KB
  • agents/connect-prompt-sdk-fallback.md7.8 KB
  • agents/connect.md7.8 KB
  • agents/create-missing-agent.md7.8 KB
  • helpers/_blob_observation.py4.4 KB
  • helpers/_blob_source_read.py39.5 KB
  • helpers/_bootstrap_io.py30.1 KB
  • helpers/_cleanup_dependencies.py27.5 KB
  • helpers/_cleanup_receipts.py13.5 KB
  • helpers/_common.py36.2 KB
  • helpers/_document_adapters.py15.0 KB
  • helpers/_document_limits.py3.9 KB
  • helpers/_embedding.py7.0 KB
  • helpers/_file_inventory.py24.4 KB
  • helpers/_file_source_config.py15.6 KB
  • helpers/_indexer_observation.py7.1 KB
  • helpers/_initial_prompt.py12.5 KB
  • helpers/_private_json.py2.4 KB
  • helpers/_progress.py12.1 KB
  • helpers/_prompt_read.py17.7 KB
  • helpers/_search_read.py6.0 KB
  • helpers/_source_readback.py1.6 KB
  • helpers/blob-contracts.md7.8 KB
  • helpers/blob-cu-contracts.md7.8 KB
  • helpers/blob_inventory.py17.1 KB
  • helpers/blob_recheck.py64.6 KB
  • helpers/blob_source.py35.8 KB
  • helpers/bootstrap-contracts.md7.8 KB
  • helpers/bootstrap_azure.py41.5 KB
  • helpers/cleanup_plan.py41.4 KB
  • helpers/contracts.md7.8 KB
  • helpers/cu_ingestion_auth.py12.5 KB
  • helpers/document-assessment.md7.8 KB
  • helpers/document_assess.py14.0 KB
  • helpers/file-upload-recovery.md7.8 KB
  • helpers/file_cu_canary.py32.7 KB
  • helpers/file_cu_mi.py9.6 KB
  • helpers/file_ingest.py15.4 KB
  • helpers/file_source.py31.7 KB
  • helpers/file_upload.py53.7 KB
  • helpers/hosted_connect.py30.8 KB
  • helpers/kb-contracts.md7.8 KB
  • helpers/knowledge_base_retrieve.py7.7 KB
  • helpers/model-discovery-contracts.md7.8 KB
  • helpers/model-discovery-scopes.md7.8 KB
  • helpers/model_discovery.py23.7 KB
  • helpers/private-artifacts.md7.2 KB
  • helpers/private_artifacts.py4.8 KB
  • helpers/prompt_cleanup.py22.0 KB
  • helpers/prompt_connect.py62.3 KB
  • helpers/requirements-assessment.txt103 B
  • helpers/retrieval-verification-contracts.md7.8 KB
  • helpers/retrieval_verify.py19.6 KB
  • helpers/search-intake-contracts.md7.6 KB
  • helpers/search_intake.py18.4 KB
  • helpers/search_reconcile.py59.7 KB
  • helpers/source_vector.py33.2 KB
  • helpers/throttle-recovery.md5.0 KB
  • helpers/vector-contracts.md7.8 KB
  • knowledge-bases/create.md8.1 KB
  • knowledge-bases/retrieve.md7.8 KB
  • knowledge-sources/create-azure-blob.md7.8 KB
  • knowledge-sources/create-file.md7.8 KB
  • lifecycle/cleanup.md7.8 KB
  • references/abstention.md1.0 KB
  • references/blob-binding-evidence.md7.8 KB
  • references/blob-indexer-observation.md7.7 KB
  • references/blob-ingestion-progress.md6.5 KB
  • references/blob-readiness-recheck.md7.8 KB
  • references/blob-vector-readiness.md2.6 KB
  • references/bootstrap-azure.md7.8 KB
  • references/content-fit.md7.8 KB
  • references/cu-ingestion.md7.8 KB
  • references/file-cu-canary.md7.8 KB
  • references/intent-routing.md7.7 KB
  • references/owner.md2.1 KB
  • references/platform-contracts.md7.7 KB
  • references/platform-interfaces.md7.8 KB
  • references/resource-intake.md7.8 KB
  • references/search-substrate.md7.8 KB
  • references/standard-cu.md7.8 KB
  • search-services/create.md7.8 KB
  • troubleshooting/diagnose.md8.7 KB

Questions about foundry-iq

Is foundry-iq safe to install?
Our scanner gave foundry-iq grade C (74/100): review before installing. It matched 3 rule(s); review them below before installing. Static analysis cannot prove safety, so pin the reviewed revision with a lockfile.
How do I install foundry-iq in Claude Code or Codex?
Run skillhash add github:microsoft/azure-skills/.github/plugins/foundry-iq-skills/skills/foundry-iq. It downloads the exact commit, checks the grade against your policy, writes skills.lock and installs it into .claude/skills and .agents/skills.
What happens if foundry-iq changes upstream?
Its content hash changes. skillhash verify fails in CI until you review the new version and update the lock. With a watch, you also get an alert.

More from microsoft/azure-skills