# Azure Deploy

> Azure Deploy is an officially published skill from Microsoft. Anomity scores its risk at 45 out of 100 (medium). It matches 1 dangerous capability combination.

- **Canonical URL:** https://catalog.anomity.ai/skill/azure-deploy
- **Kind:** Skill
- **Publisher:** Microsoft
- **Trust level:** official
- **Risk score:** 45/100 (medium)
- **Website:** https://github.com/microsoft
- **Last updated:** 2026-09-02
- **JSON:** https://catalog.anomity.ai/api/entries/skill/azure-deploy

## Description

Microsoft's skill for executing Azure deployments with validation and error recovery — provisioning resources, handling partial failures, and retrying with corrected parameters rather than stopping at the first error.

It runs deployment commands, holds cloud credentials, and reaches the network, so it declares shell execution, credential access, and outbound network. Shell plus network is Anomity's exfiltration pattern, and the credentials in play are cloud-plane credentials — which is to say this is one of the highest-consequence skills in the catalog, and the one most deserving of a human approving each run rather than a standing grant.

## Why it scored 45

The score starts at the catalog's neutral base of 50 and moves only through the signals below. The formula is published at https://catalog.anomity.ai/about — there is no model and no hidden heuristic.

| Signal | Contribution | Severity | Evidence |
| --- | --- | --- | --- |
| Published by the vendor | -40 | trust offset |  |
| 2 high-risk capabilities: shell:execute, credentials:access | +20 | critical |  |
| Data exfiltration risk (high) | +15 | high | Shell execution combined with outbound network access can exfiltrate arbitrary data from the machine. |

Clamped result: **45/100**, band **medium**.

## Capabilities

| Capability | Name | Security implication |
| --- | --- | --- |
| `shell:execute` | Shell execution | Can run arbitrary shell commands. Combined with network access this becomes effectively a remote shell. |
| `credentials:access` | Credentials access | Reads provider API keys, OAuth tokens, or other secrets from the host keychain or environment. |
| `network:outbound` | Outbound network | Can make outbound network requests. Required for hosted model providers and remote APIs; also the path for data exfiltration if combined with read access. |

## Dangerous combinations matched

### Data exfiltration risk (high)

Shell execution combined with outbound network access can exfiltrate arbitrary data from the machine.

Capabilities: `shell:execute`, `network:outbound`

## Related skills

- [Azure Diagnostics](https://catalog.anomity.ai/skill/azure-diagnostics) — risk 45 (medium)
- [AI Research Reproduction](https://catalog.anomity.ai/skill/ai-research-reproduction) — risk 100 (critical)
- [Browser Act](https://catalog.anomity.ai/skill/browser-act) — risk 95 (critical)
- [Azure Compliance](https://catalog.anomity.ai/skill/azure-compliance) — risk 20 (low)
- [Azure Cost](https://catalog.anomity.ai/skill/azure-cost) — risk 20 (low)
- [Cloudflare One](https://catalog.anomity.ai/skill/cloudflare-one) — risk 20 (low)

---

Source: Anomity Catalog (https://catalog.anomity.ai/). Scoring methodology: https://catalog.anomity.ai/about. Machine-readable index: https://catalog.anomity.ai/llms.txt · https://catalog.anomity.ai/openapi.json