{
  "entry": {
    "kind": "skill",
    "slug": "azure-diagnostics",
    "name": "Azure Diagnostics",
    "vendor": "Microsoft",
    "description": "Diagnoses and remediates Azure production issues systematically — reading resource health, correlating logs, and proposing or applying fixes for common failure modes.\n\nCapabilities are shell execution, credential access, and outbound network. The remediation half is what makes it more than a reporting tool and more than a read-only risk: a skill that can change production configuration during an incident is operating at the moment when review is least likely to happen. Prefer running it in diagnose-only mode and letting a human apply the change.",
    "website": "https://github.com/microsoft",
    "repository": null,
    "documentationUrl": null,
    "license": null,
    "version": null,
    "trustLevel": "official",
    "capabilities": [
      "shell:execute",
      "credentials:access",
      "network:outbound"
    ],
    "packaging": null,
    "configFiles": null,
    "category": "devops",
    "updatedAt": "2026-09-02",
    "risk": {
      "score": 45,
      "band": "medium",
      "signals": [
        {
          "id": "trust-official",
          "kind": "trust",
          "label": "Published by the vendor",
          "contribution": -40
        },
        {
          "id": "high-risk-capabilities",
          "kind": "capability",
          "label": "2 high-risk capabilities: shell:execute, credentials:access",
          "contribution": 20
        },
        {
          "id": "exfiltration-risk",
          "kind": "combination",
          "label": "Data exfiltration risk (high)",
          "description": "Shell execution combined with outbound network access can exfiltrate arbitrary data from the machine.",
          "contribution": 15
        }
      ],
      "dangerousCombos": [
        {
          "id": "exfiltration-risk",
          "name": "Data exfiltration risk",
          "description": "Shell execution combined with outbound network access can exfiltrate arbitrary data from the machine.",
          "capabilities": [
            "shell:execute",
            "network:outbound"
          ],
          "severity": "high"
        }
      ]
    },
    "dangerousCombos": [
      {
        "id": "exfiltration-risk",
        "name": "Data exfiltration risk",
        "description": "Shell execution combined with outbound network access can exfiltrate arbitrary data from the machine.",
        "capabilities": [
          "shell:execute",
          "network:outbound"
        ],
        "severity": "high"
      }
    ]
  }
}