deployment-stacks-2025

Pass

Audited by Gen Agent Trust Hub on Sep 20, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides extensive documentation for managing Azure resources using the az stack CLI and PowerShell modules.
  • The commands included (e.g., az stack sub create, az stack sub delete, az group create) are standard tools for Azure infrastructure operations.
  • Automated execution flags such as --yes are included in examples for CI/CD environments, which is a common practice for automation.
  • [EXTERNAL_DOWNLOADS]: The skill references official Microsoft documentation for Deployment Stacks and migration guides.
  • References point to the learn.microsoft.com domain, which is a trusted source for technical documentation.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to process Bicep templates (main.bicep) and parameters files (parameters.json) to manage infrastructure.
  • Ingestion points: The skill reads local Bicep files and JSON parameter files provided by the user.
  • Boundary markers: None identified in the provided templates.
  • Capability inventory: The skill uses az stack commands to create, update, and delete resources in an Azure subscription.
  • Sanitization: The skill relies on Azure Resource Manager's native validation and the az stack sub what-if command to check for changes before deployment.
  • The risk is assessed as low given the administrative purpose of the skill.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 20, 2026, 02:18 AM