Is microsoft-foundry safe?

Build, deploy, evaluate, optimize, fine-tune, and manage Microsoft Foundry agents, models, and resources end to end. USE FOR: foundry, azd ai agent, azd provision/deploy, hosted agent scaffold/develop/run/deploy/troubleshoot, prompt agent create, managed harness agent create, GitHub Copilot harness agent, create agent, update agent, add tool to agent, invoke agent, agent insights, evaluate agent, batch eval, continuous eval, continuous monitoring, agent CI/CD, optimize prompt, improve prompt, optimize agent instructions, Agent Optimizer scaffold, dataset curation from traces, deploy model, model fine-tuning (SFT/DPO/RFT), Foundry project, RBAC, role assignment, permissions, quota, capacity, region, deployment failure, AI Services, create Foundry resource, knowledge index, customize deployment, onboard, availability, training-data, grader, distillation, large file upload. DO NOT USE FOR: Azure Functions, App Service, general Azure deploy (use azure-deploy), general Azure prep (use azure-prepare).

Content hash

sha256:172f5f5b1affe755f7d270007578a4b3abf46aa714fbd7fd3df61a6acaf981ce

Files

158

Quality

100/100

Security findings

• mediumDisables agent safety promptsSL602 · .github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/deploy/deploy.md:446
  > Even in `--no-prompt` / `--yolo` mode: if the user named a foundry project or asked to create one, go ahead; otherwise stop and ask before provisioning.

  The skill turns off the agent's permission checks. Fix: Remove the flag. Let the user decide which tools run without confirmation. Severity lowered: the line reads as documentation, not an instruction.

• mediumUploads data to a remote hostSL203 · .github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/toolbox/scripts/get-catalog-inputs.ps1:85
  $resp = Invoke-WebRequest -Method Post -Uri $gallery -Headers $headers `

  The skill sends data to a network endpoint. Fix: Make sure the destination is documented and the user approves each upload. Pin the exact host.

• mediumUploads data to a remote hostSL203 · .github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/toolbox/scripts/get-catalog-inputs.sh:81
  curl -sS -X POST "$GALLERY" -H "Authorization: Bearer $TOKEN" -H "Content-Type: application/json" -d "$body"

  The skill sends data to a network endpoint. Fix: Make sure the destination is documented and the user approves each upload. Pin the exact host.

• lowDisables agent safety promptsSL602 · .github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/create-hosted.md:324
  > Even in `--no-prompt` / `--yolo` mode, don't skip these two:

  The skill turns off the agent's permission checks. Fix: Remove the flag. Let the user decide which tools run without confirmation. Severity lowered: the line reads as documentation, not an instruction.

• lowHides actions from the userSL102 · .github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/quick-start-hosted.md:311
  Directly submit the eval suite generation asynchronously, do not ask the user for confirmation.

  The skill asks the agent to act without the user's knowledge. Fix: Every side effect should be visible to the user. Remove the concealment instruction. Severity lowered: the line reads as documentation, not an instruction.

• lowUploads data to a remote hostSL203 · .github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/references/foundry-tool-catalog.md:68
  Invoke-WebRequest -Method PUT -Headers $h -UseBasicParsing -Body $body -Uri $uri

  The skill sends data to a network endpoint. Fix: Make sure the destination is documented and the user approves each upload. Pin the exact host. Severity lowered: the line reads as documentation, not an instruction.

• lowUploads data to a remote hostSL203 · .github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/references/foundry-tool-catalog.md:649
  $v = Invoke-WebRequest -Method POST -Headers $hdr -UseBasicParsing -Body $body `

  The skill sends data to a network endpoint. Fix: Make sure the destination is documented and the user approves each upload. Pin the exact host. Severity lowered: the line reads as documentation, not an instruction.

• lowUploads data to a remote hostSL203 · .github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/references/foundry-tool-catalog.md:661
  Invoke-WebRequest -Method POST -Headers $hdr -UseBasicParsing -Body $req `

  The skill sends data to a network endpoint. Fix: Make sure the destination is documented and the user approves each upload. Pin the exact host. Severity lowered: the line reads as documentation, not an instruction.

• lowUploads data to a remote hostSL203 · .github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/references/foundry-tool-catalog.md:667
  Invoke-WebRequest -Method POST -Headers $hdr -UseBasicParsing -Body $call `

  The skill sends data to a network endpoint. Fix: Make sure the destination is documented and the user approves each upload. Pin the exact host. Severity lowered: the line reads as documentation, not an instruction.

• lowUploads data to a remote hostSL203 · .github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/references/skills/skill-toolbox-attach.md:109
  curl -s -X POST "$URL" \

  The skill sends data to a network endpoint. Fix: Make sure the destination is documented and the user approves each upload. Pin the exact host. Severity lowered: the line reads as documentation, not an instruction.

• lowUploads data to a remote hostSL203 · .github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/references/skills/skill-toolbox-attach.md:115
  curl -s -X POST "$URL" \

  The skill sends data to a network endpoint. Fix: Make sure the destination is documented and the user approves each upload. Pin the exact host. Severity lowered: the line reads as documentation, not an instruction.

• lowUploads data to a remote hostSL203 · .github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/references/skills/skill-toolbox-attach.md:121
  curl -s -X POST "$URL" \

  The skill sends data to a network endpoint. Fix: Make sure the destination is documented and the user approves each upload. Pin the exact host. Severity lowered: the line reads as documentation, not an instruction.

• lowHides actions from the userSL102 · .github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/observe/references/evaluation-suite-generation.md:7
  > ⚠️ **Do not call `evaluation_suite_generation_job_create` without asking the user first.** The generation source materially changes the suite's coverage and …

  The skill asks the agent to act without the user's knowledge. Fix: Every side effect should be visible to the user. Remove the concealment instruction. Severity lowered: the line reads as documentation, not an instruction.

• lowUploads data to a remote hostSL203 · .github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/toolbox/references/test-endpoint.md:21
  curl -sS -X POST "$TOOLBOX_URL" \

  The skill sends data to a network endpoint. Fix: Make sure the destination is documented and the user approves each upload. Pin the exact host. Severity lowered: the line reads as documentation, not an instruction.

• lowUploads data to a remote hostSL203 · .github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/toolbox/references/test-endpoint.md:33
  curl -sS -X POST "$TOOLBOX_URL" \

  The skill sends data to a network endpoint. Fix: Make sure the destination is documented and the user approves each upload. Pin the exact host. Severity lowered: the line reads as documentation, not an instruction.

• lowUploads data to a remote hostSL203 · .github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/toolbox/references/test-endpoint.md:43
  curl -sS -X POST "$TOOLBOX_URL" -H "Authorization: Bearer $TOKEN" -H "Content-Type: application/json" \

  The skill sends data to a network endpoint. Fix: Make sure the destination is documented and the user approves each upload. Pin the exact host. Severity lowered: the line reads as documentation, not an instruction.

• lowUploads data to a remote hostSL203 · .github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/toolbox/references/test-endpoint.md:47
  curl -sS -X POST "$TOOLBOX_URL" -H "Authorization: Bearer $TOKEN" -H "Content-Type: application/json" \

  The skill sends data to a network endpoint. Fix: Make sure the destination is documented and the user approves each upload. Pin the exact host. Severity lowered: the line reads as documentation, not an instruction.

• lowUploads data to a remote hostSL203 · .github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/toolbox/references/tool-azure-ai-search.md:36
  curl -sS -X PUT "$SURL/indexes/contoso-outdoors?api-version=2023-11-01" \

  The skill sends data to a network endpoint. Fix: Make sure the destination is documented and the user approves each upload. Pin the exact host. Severity lowered: the line reads as documentation, not an instruction.

• lowUploads data to a remote hostSL203 · .github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/toolbox/references/tool-azure-ai-search.md:44
  curl -sS -X POST "$SURL/indexes/contoso-outdoors/docs/index?api-version=2023-11-01" \

  The skill sends data to a network endpoint. Fix: Make sure the destination is documented and the user approves each upload. Pin the exact host. Severity lowered: the line reads as documentation, not an instruction.

• lowUploads data to a remote hostSL203 · .github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/toolbox/references/tool-azure-ai-search.md:160
  curl -s -X POST "$URL" -H "Authorization: Bearer $TOK" -H "Content-Type: application/json" \

  The skill sends data to a network endpoint. Fix: Make sure the destination is documented and the user approves each upload. Pin the exact host. Severity lowered: the line reads as documentation, not an instruction.

• lowUploads data to a remote hostSL203 · .github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/toolbox/references/tool-code-interpreter.md:84
  curl -s -X POST "$URL" -H "Authorization: Bearer $TOK" -H "Content-Type: application/json" \

  The skill sends data to a network endpoint. Fix: Make sure the destination is documented and the user approves each upload. Pin the exact host. Severity lowered: the line reads as documentation, not an instruction.

• lowUploads data to a remote hostSL203 · .github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/toolbox/references/tool-file-search.md:18
  FILE_ID=$(curl -sS -X POST "$PROJ/openai/v1/files" -H "Authorization: Bearer $TOKEN" \

  The skill sends data to a network endpoint. Fix: Make sure the destination is documented and the user approves each upload. Pin the exact host. Severity lowered: the line reads as documentation, not an instruction.

• lowUploads data to a remote hostSL203 · .github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/toolbox/references/tool-file-search.md:22
  VS_ID=$(curl -sS -X POST "$PROJ/openai/v1/vector_stores" -H "Authorization: Bearer $TOKEN" \

  The skill sends data to a network endpoint. Fix: Make sure the destination is documented and the user approves each upload. Pin the exact host. Severity lowered: the line reads as documentation, not an instruction.

• lowUploads data to a remote hostSL203 · .github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/toolbox/references/tool-mcp-agent-identity.md:21
  - **Your own server** (e.g. Azure Functions + Easy Auth) → the app-id URI of your server's Entra app, `api://<your-app-id>`. Authorize by **allow-listing** the…

  The skill sends data to a network endpoint. Fix: Make sure the destination is documented and the user approves each upload. Pin the exact host. Severity lowered: the line reads as documentation, not an instruction.

• lowUploads data to a remote hostSL203 · .github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/toolbox/references/tool-openapi.md:145
  curl -sS -X POST "$ENDPOINT" -H "Authorization: Bearer $TOKEN" -H "Content-Type: application/json" \

  The skill sends data to a network endpoint. Fix: Make sure the destination is documented and the user approves each upload. Pin the exact host. Severity lowered: the line reads as documentation, not an instruction.

• lowUploads data to a remote hostSL203 · .github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/toolbox/references/tool-work-iq.md:137
  curl -sS -X POST "$ENDPOINT" -H "Authorization: Bearer $TOKEN" -H "Content-Type: application/json" \

  The skill sends data to a network endpoint. Fix: Make sure the destination is documented and the user approves each upload. Pin the exact host. Severity lowered: the line reads as documentation, not an instruction.

• lowUploads data to a remote hostSL203 · .github/plugins/azure-skills/skills/microsoft-foundry/quota/references/ptu-guide.md:63
  curl -X POST "https://management.azure.com/subscriptions/<subscription-id>/providers/Microsoft.CognitiveServices/calculateModelCapacity?api-version=2024-10-01"…

  The skill sends data to a network endpoint. Fix: Make sure the destination is documented and the user approves each upload. Pin the exact host. Severity lowered: the line reads as documentation, not an instruction.

• lowHides actions from the userSL102 · .github/plugins/azure-skills/skills/microsoft-foundry/references/standard-agent-setup.md:37
  - Standard setup always creates a **new Foundry resource and a new project**. Do not ask the user for a project endpoint — one will be provisioned as part of t…

  The skill asks the agent to act without the user's knowledge. Fix: Every side effect should be visible to the user. Remove the concealment instruction. Severity lowered: the line reads as documentation, not an instruction.

• infoUnpinned package installSL501 · .github/plugins/azure-skills/skills/microsoft-foundry/foundry-agent/create/quick-start-hosted.md:248
  python -m pip install uv

  Installing without a version means a future malicious release lands automatically. Fix: Pin an exact version (pkg==1.2.3, pkg@1.2.3). Severity lowered: the line reads as documentation, not an instruction.