aspire-deployment
Pass
Audited by Gen Agent Trust Hub on Jun 18, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill includes instructions for installing the .NET Aspire CLI via an official installation script located at
https://aspire.dev/install.sh. - [COMMAND_EXECUTION]: The skill orchestrates deployments using standard command-line tools including the Aspire CLI, Azure CLI (
az), AWS CLI (aws), and Kubernetes management tools (kubectl,helm). The use of these tools is transparent and aligned with the skill's purpose of cloud infrastructure management. - [CREDENTIALS_UNSAFE]: The skill instructions and reference materials emphasize secure secret handling. It explicitly directs the agent to redact or avoid printing secrets, tokens, and passwords, and provides guidance on using secure credential stores like GitHub Secrets and environment variables for deployment parameters.
- [PROMPT_INJECTION]: A static flag regarding concealment in
references/preflight.mdwas analyzed and determined to be a false positive. The text in question provides technical guidance on avoiding output pipes (tee,tail) to ensure that interactive shell prompts remain functional during deployment, rather than attempting to hide malicious actions from the user.
Audit Metadata