deployment-stacks-2025
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides extensive documentation for managing Azure resources using the
az stackCLI and PowerShell modules. - The commands included (e.g.,
az stack sub create,az stack sub delete,az group create) are standard tools for Azure infrastructure operations. - Automated execution flags such as
--yesare included in examples for CI/CD environments, which is a common practice for automation. - [EXTERNAL_DOWNLOADS]: The skill references official Microsoft documentation for Deployment Stacks and migration guides.
- References point to the
learn.microsoft.comdomain, which is a trusted source for technical documentation. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to process Bicep templates (
main.bicep) and parameters files (parameters.json) to manage infrastructure. - Ingestion points: The skill reads local Bicep files and JSON parameter files provided by the user.
- Boundary markers: None identified in the provided templates.
- Capability inventory: The skill uses
az stackcommands to create, update, and delete resources in an Azure subscription. - Sanitization: The skill relies on Azure Resource Manager's native validation and the
az stack sub what-ifcommand to check for changes before deployment. - The risk is assessed as low given the administrative purpose of the skill.
Audit Metadata