56 results available

azure-storage

microsoft

Last changed

Hardened

This skill has been hardened by Chainguard

Last changed

This version passed the hardening gate. Hardening applied 2 targeted changes and preserved all other text. Classified findings before hardening: 15. Classified findings closed: 0. Classified findings remaining: 15. Unclassified scanner findings remaining: 0. Review findings closed: 3. Review findings remaining: 15.

Open before hardening

Medium

Low

Open after hardening

Medium

Low

File	Group	Subtype	Severity	Status
references/sdk-usage.md	Sensitive Data & Secret Exposure	Data exfiltration	Medium	Open
SKILL.md	Sensitive Data & Secret Exposure	Data exfiltration	Medium	Open
references/auth-best-practices.md	Prompt Injection	Indirect prompt injection	Low	Open
references/sdk/azure-storage-file-datalake-py.md	Supply Chain & Install-Time Trust	Install-time download and execute	Low	Open
references/sdk-usage.md	Supply Chain & Install-Time Trust	Install-time download and execute	Low	Open
references/sdk/azure-storage-queue-py.md	Supply Chain & Install-Time Trust	Install-time download and execute	Low	Open
references/sdk/azure-storage-file-datalake-py.md	Malicious Code & Command Execution	—	Low	Open
references/sdk/azure-data-tables-py.md	Supply Chain & Install-Time Trust	Install-time download and execute	Low	Open

15 findings

SKILL.md

Azure Storage Services

Services

Service	Use When	MCP Tools	CLI
Blob Storage	Objects, files, backups, static content	`azure__storage`	`az storage blob`
File Shares	SMB file shares, lift-and-shift	-	`az storage file`
Queue Storage	Async messaging, task queues	-	`az storage queue`
Table Storage	NoSQL key-value (consider Cosmos DB)	-	`az storage table`
Data Lake	Big data analytics, hierarchical namespace	-	`az storage fs`

MCP Server (Preferred)

When Azure MCP is enabled:

azure__storage with command storage_account_list - List storage accounts
azure__storage with command storage_container_list - List containers in account
azure__storage with command storage_blob_list - List blobs in container
azure__storage with command storage_blob_get - Download blob content
azure__storage with command storage_blob_put - Upload blob content

If Azure MCP is not enabled: In Copilot CLI or Claude Code, ask the user to run /mcp and enable Azure MCP; in other hosts, ask the user to enable Azure MCP through the host's MCP configuration.

CLI Fallback


# List storage accounts
az storage account list --output table

# List containers
az storage container list --account-name ACCOUNT --output table

# List blobs
az storage blob list --account-name ACCOUNT --container-name CONTAINER --output table

# Download blob
az storage blob download --account-name ACCOUNT --container-name CONTAINER --name BLOB --file LOCAL_PATH

# Upload blob
az storage blob upload --account-name ACCOUNT --container-name CONTAINER --name BLOB --file LOCAL_PATH

Storage Account Tiers

Tier	Use Case	Performance
Standard	General purpose, backup	Milliseconds
Premium	Databases, high IOPS	Sub-millisecond

Blob Access Tiers

Tier	Access Frequency	Cost
Hot	Frequent	Higher storage, lower access
Cool	Infrequent (30+ days)	Lower storage, higher access
Cold	Rare (90+ days)	Lower still
Archive	Rarely (180+ days)	Lowest storage, rehydration required

Redundancy Options

Type	Durability	Use Case
LRS	11 nines	Dev/test, recreatable data
ZRS	12 nines	Regional high availability
GRS	16 nines	Disaster recovery
GZRS	16 nines	Best durability

Service Details

For deep documentation on specific services:

Blob storage patterns and lifecycle -> Blob Storage documentation
File shares and Azure File Sync -> Azure Files documentation
Queue patterns and poison handling -> Queue Storage documentation

SDK Quick References

For building applications with Azure Storage SDKs, see the condensed guides:

Blob Storage: Python | TypeScript | Java | Rust
Queue Storage: Python | TypeScript
File Shares: Python | TypeScript
Data Lake: Python
Tables: Python | Java

For full package listing across all languages, see SDK Usage Guide.

Azure SDKs

For building applications that interact with Azure Storage programmatically, Azure provides SDK packages in multiple languages (.NET, Java, JavaScript, Python, Go, Rust). See SDK Usage Guide for package names, installation commands, and quick start examples.

Install

Install with chainctl


chainctl skill install public/microsoft/azure-storage:latest

Get started with chainctl

View source

Harden your own skills

Bring Chainguard's hardening pipeline to your first-party skills — custom rulesets, automated remediation, full audit trail.

Provenance

Upstream sourcehttps://github.com/microsoft/azure-skills

Upstream commit344bd5b3e041445237de09007ef62f4b3c51805d

OCI reference

skills.cgr.dev/public/github.com/microsoft/skills/azure-storage:latest

License

MIT

Files

HARDENING.md

LICENSE

SKILL.md

references/auth-best-practices.md

references/sdk-usage.md

references/sdk/azure-data-tables-java.md

references/sdk/azure-data-tables-py.md

references/sdk/azure-storage-blob-java.md

references/sdk/azure-storage-blob-py.md

references/sdk/azure-storage-blob-rust.md

references/sdk/azure-storage-blob-ts.md

references/sdk/azure-storage-file-datalake-py.md

references/sdk/azure-storage-file-share-py.md

references/sdk/azure-storage-file-share-ts.md

references/sdk/azure-storage-queue-py.md

references/sdk/azure-storage-queue-ts.md

The trusted source for open source

Talk to an expert

Privacy

Terms

© 2026 Chainguard, Inc. All Rights Reserved.
Chainguard® and the Chainguard logo are registered trademarks of Chainguard, Inc. in the United States and/or other countries.
The other respective trademarks mentioned on this page are owned by the respective companies and use of them does not imply any affiliation or endorsement.