azure-deployment-preflight

Pass

Audited by Gen Agent Trust Hub on Apr 14, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: Executes Azure CLI (az), Azure Developer CLI (azd), and Bicep CLI commands to perform deployment validation and check tool availability.
  • [DATA_EXFILTRATION]: Accesses Bicep templates and parameter files to determine target scopes and configuration; no unauthorized external transmission of data was identified.
  • [PROMPT_INJECTION]: The skill processes project-level files that could potentially contain indirect instructions.
  • Ingestion points: Reads .bicep and parameter files from the local environment (SKILL.md).
  • Boundary markers: Absent; the agent identifies deployment properties directly from file content.
  • Capability inventory: Runs shell commands (az, azd, bicep) and writes a report to the project root (SKILL.md).
  • Sanitization: File contents are used without specific escaping or validation.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 14, 2026, 07:30 AM
Security Audit — agent-trust-hub — azure-deployment-preflight