alz-sync-troubleshoot

Pass

Audited by Gen Agent Trust Hub on Jun 16, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes local PowerShell scripts located at ./Scripts/CloudAdoptionFramework/New-ALZPolicyDefaultStructure.ps1 and ./Scripts/CloudAdoptionFramework/Sync-ALZPolicyFromLibrary.ps1. These are expected components of the Enterprise Policy as Code (EPAC) repository.
  • [EXTERNAL_DOWNLOADS]: The skill's workflow involves cloning the official Azure/Azure-Landing-Zones-Library and azure-monitor-baseline-alerts repositories from GitHub. These are resources from a trusted organization and well-known service.
  • [SAFE]: Configuration files generated by the skill (global-settings.jsonc) utilize safe placeholder identifiers (zeros) for sensitive fields like tenant IDs and owner IDs, preventing the accidental exposure of real credentials during reproduction steps.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 16, 2026, 10:13 AM
Security Audit — agent-trust-hub — alz-sync-troubleshoot