deployment-e2e-testing
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- Command Execution via Terminal Automation: The skill documentation describes the use of the Hex1b library to automate terminal operations, including project creation (
aspire new), deployment (aspire deploy), and resource cleanup (az group delete). These operations are essential for the skill's primary purpose of automating deployment testing. - External Resource Acquisition: The skill outlines methods for downloading and installing the Aspire CLI from pull request artifacts or official release channels. While these involve fetching external binaries, they are standard procedures within a development and continuous integration workflow for CLI tooling.
- Azure Authentication Management: Guidance is included for managing Azure authentication using OpenID Connect (OIDC) for CI environments and the Azure CLI for local development. The skill encourages security best practices by explicitly advising against hardcoded credentials and emphasizing the use of environment variables and GitHub secrets.
Audit Metadata