# Azure Diagnostics

> Azure Diagnostics is an officially published skill from Microsoft. Anomity scores its risk at 45 out of 100 (medium). It matches 1 dangerous capability combination.

- **Canonical URL:** https://catalog.anomity.ai/skill/azure-diagnostics
- **Kind:** Skill
- **Publisher:** Microsoft
- **Trust level:** official
- **Risk score:** 45/100 (medium)
- **Website:** https://github.com/microsoft
- **Last updated:** 2026-09-02
- **JSON:** https://catalog.anomity.ai/api/entries/skill/azure-diagnostics

## Description

Diagnoses and remediates Azure production issues systematically — reading resource health, correlating logs, and proposing or applying fixes for common failure modes.

Capabilities are shell execution, credential access, and outbound network. The remediation half is what makes it more than a reporting tool and more than a read-only risk: a skill that can change production configuration during an incident is operating at the moment when review is least likely to happen. Prefer running it in diagnose-only mode and letting a human apply the change.

## Why it scored 45

The score starts at the catalog's neutral base of 50 and moves only through the signals below. The formula is published at https://catalog.anomity.ai/about — there is no model and no hidden heuristic.

| Signal | Contribution | Severity | Evidence |
| --- | --- | --- | --- |
| Published by the vendor | -40 | trust offset |  |
| 2 high-risk capabilities: shell:execute, credentials:access | +20 | critical |  |
| Data exfiltration risk (high) | +15 | high | Shell execution combined with outbound network access can exfiltrate arbitrary data from the machine. |

Clamped result: **45/100**, band **medium**.

## Capabilities

| Capability | Name | Security implication |
| --- | --- | --- |
| `shell:execute` | Shell execution | Can run arbitrary shell commands. Combined with network access this becomes effectively a remote shell. |
| `credentials:access` | Credentials access | Reads provider API keys, OAuth tokens, or other secrets from the host keychain or environment. |
| `network:outbound` | Outbound network | Can make outbound network requests. Required for hosted model providers and remote APIs; also the path for data exfiltration if combined with read access. |

## Dangerous combinations matched

### Data exfiltration risk (high)

Shell execution combined with outbound network access can exfiltrate arbitrary data from the machine.

Capabilities: `shell:execute`, `network:outbound`

## Related skills

- [Azure Deploy](https://catalog.anomity.ai/skill/azure-deploy) — risk 45 (medium)
- [AI Research Reproduction](https://catalog.anomity.ai/skill/ai-research-reproduction) — risk 100 (critical)
- [Browser Act](https://catalog.anomity.ai/skill/browser-act) — risk 95 (critical)
- [Azure Compliance](https://catalog.anomity.ai/skill/azure-compliance) — risk 20 (low)
- [Azure Cost](https://catalog.anomity.ai/skill/azure-cost) — risk 20 (low)
- [Cloudflare One](https://catalog.anomity.ai/skill/cloudflare-one) — risk 20 (low)

---

Source: Anomity Catalog (https://catalog.anomity.ai/). Scoring methodology: https://catalog.anomity.ai/about. Machine-readable index: https://catalog.anomity.ai/llms.txt · https://catalog.anomity.ai/openapi.json