azure-app-onboard-prereq
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [Command Execution]: The skill utilizes standard system utilities (Azure CLI, Git, PowerShell) for environment verification and session management. Any execution of build or package manager commands is strictly prohibited unless specifically authorized by the user via a per-command consent prompt.
- [Indirect Prompt Injection Surface]: By scanning user-provided repositories, the skill ingests untrusted data. However, it mitigates risk by using static analysis patterns, defined schemas for artifact storage, and a structured workflow that avoids executing arbitrary instructions found within target repository files.
- [Malicious Content Detection]: The skill includes explicit logic to identify and halt evaluation if a repository appears to be intentionally designed as a vulnerable or 'hackable' application, protecting the environment from potentially risky deployments.
Audit Metadata