azure-security

Test Azure security weaknesses across Blob storage, IMDS, Azure AD tokens, and Function App SSRF.

846|152|Updated Mar 13, 2026
One-click install
npx skills add https://github.com/xalgord/xalgorix --skill azure-security-xalgord
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: azure-security
Source: https://github.com/xalgord/xalgorix/tree/main/internal/tools/skills/data/cloud/azure-security
Command: npx skills add https://github.com/xalgord/xalgorix --skill azure-security-xalgord

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Azure cloud deployments often suffer from misconfigurations and insecure identity handling that expose sensitive data and services. This Azure security Skill helps security teams identify and test these weaknesses across Blob storage access, Instance Metadata Service exposure, Azure AD token handling vulnerabilities, and Function App SSRF vectors.

Core Features & Use Cases

  • Azure Blob storage misconfiguration testing
  • IMDS exposure checks
  • Azure AD token handling vulnerability assessment
  • Function App SSRF detection and remediation guidance

Quick Start

Provide the target Azure environment and run the security tests to assess blob access, IMDS exposure, and token handling.

Frequently Asked Questions about azure-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I test Azure Blob storage for misconfigurations and public access?

Azure Blob storage misconfiguration testing involves probing container access controls to identify publicly exposed data. This Skill assesses Blob storage configurations to detect insecure access permissions and prevent sensitive data exposure.

What is Azure IMDS exposure and how does it impact cloud security?

Azure IMDS exposure happens when the Instance Metadata Service is accessible to unauthorized actors, enabling metadata theft. This Skill performs IMDS exposure checks to identify endpoints leaking sensitive instance information and credentials.

How do I detect SSRF vulnerabilities in Azure Function Apps?

Detecting Azure Function App SSRF involves sending crafted requests to internal endpoints through the application. This Skill identifies Function App SSRF vectors and provides remediation guidance to prevent server-side request forgery attacks.

Can I assess Azure AD token handling vulnerabilities during pentesting?

You can assess Azure AD token handling vulnerabilities by testing how applications acquire, validate, and store access tokens. This Skill evaluates Azure AD token handling to identify identity threats and token theft vectors.

Do I need access to the target Azure environment to run security tests?

Yes, you need access to the test targets and knowledge of Azure services to run these security tests. This Skill requires common security testing tooling to probe configurations and endpoints across your Azure deployments.