aspire-deployment
Pass
Audited by Gen Agent Trust Hub on Jul 30, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [Installation of Official Tooling]: The skill provides instructions to install the Aspire CLI using a script from the
aspire.devdomain. This is a standard method for delivering developer tools within the vendor's ecosystem. - [Secure Parameter and Secret Management]: The documentation includes comprehensive guidance on redacting secrets, using environment variables for sensitive data, and leveraging CI/CD secret stores. These practices are designed to prevent accidental exposure of credentials during the deployment lifecycle.
- [Deployment Visibility and Control]: The workflow incorporates preflight checks and command-line flags like
--list-stepsand--non-interactive. These features allow for auditing deployment plans before execution, providing transparency into the infrastructure changes being made. - [Integration with Trusted Cloud Services]: The skill uses official integrations for Azure, AWS, and Kubernetes. The deployment logic follows the vendor's recommended patterns for resource provisioning and container orchestration.
Audit Metadata