azure-app-service
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONCREDENTIALS_UNSAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides numerous Azure CLI and Terraform commands for deploying and managing infrastructure. This includes creating resource groups, app service plans, web apps, and managing deployment slots.
- [CREDENTIALS_UNSAFE]: The Terraform configuration in
references/terraform-app-service-configuration.mdincludes a generic hardcoded database connection string (postgresql://user:pass@host/db) and an API key placeholder (your-api-key-here). These are clearly intended as illustrative examples for documentation purposes and do not represent a security risk, although the skill's own best practices recommend using Azure Key Vault for actual secret management. - [INDIRECT_PROMPT_INJECTION]: The
scripts/validate-schema.shscript takes a user-provided file path as an argument. However, the script is currently a placeholder that only echoes the filename and performs no active processing or execution of the file content, posing no risk in its current state.
Audit Metadata