azure-app-service

Pass

Audited by Gen Agent Trust Hub on Sep 16, 2026

Risk Level: SAFECOMMAND_EXECUTIONCREDENTIALS_UNSAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides numerous Azure CLI and Terraform commands for deploying and managing infrastructure. This includes creating resource groups, app service plans, web apps, and managing deployment slots.
  • [CREDENTIALS_UNSAFE]: The Terraform configuration in references/terraform-app-service-configuration.md includes a generic hardcoded database connection string (postgresql://user:pass@host/db) and an API key placeholder (your-api-key-here). These are clearly intended as illustrative examples for documentation purposes and do not represent a security risk, although the skill's own best practices recommend using Azure Key Vault for actual secret management.
  • [INDIRECT_PROMPT_INJECTION]: The scripts/validate-schema.sh script takes a user-provided file path as an argument. However, the script is currently a placeholder that only echoes the filename and performs no active processing or execution of the file content, posing no risk in its current state.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 16, 2026, 10:44 AM
Security Audit — agent-trust-hub — azure-app-service