azure-prepare
Pass
Audited by Gen Agent Trust Hub on Oct 10, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- External Content Integration: The skill fetches deployment manifests and templates from official services such as
cdn.functions.azure.comandgithub.com/Azure-Samples. These are used to provide the latest project structures and infrastructure-as-code patterns. - Trusted Tool Installation: Documentation within the skill references the installation of the Azure Developer CLI via a script from
aka.ms, which is a recognized and trusted domain. - Command Execution for Configuration: The skill includes utility scripts (Shell and PowerShell) designed to grant data-plane access to SQL databases using managed identities. These scripts are intended to be run as post-provisioning hooks to automate environment setup.
- Codebase Scanning Surface: The preparation workflow involves scanning local project files (e.g.,
package.json,*.AppHost.csproj) to detect the project type and required infrastructure. While this is a standard operational procedure for deployment tools, it represents a surface where specifically crafted files could influence the agent's detection logic.
Audit Metadata