azure-upgrade
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- Command Execution: The skill extensively utilizes the Azure CLI (
az) to automate resource management and migration tasks. This includes usingaz restfor direct API interactions, which is a standard approach for advanced Azure orchestration.\n- Secure Handling of Secrets: During the migration of Azure Functions, the skill manages sensitive data such as access keys and application settings. It provides explicit guidance on security best practices, including the use of environment variables to prevent secret leakage in command logs and the programmatic clearing of variables from memory.\n- Modernization through Trusted Sources: The skill automates the modernization of Java projects by fetching the official Azure SDK Bill of Materials (BOM) from the Microsoft Azure SDK for Java GitHub repository. This ensures that the migration aligns with current official standards and uses verified dependencies.\n- Automated Build Tool Orchestration: To facilitate SDK upgrades, the skill executes build tools like Maven and Gradle through a provided Python script. This automation streamlines the process of updating dependency management files and resolving library versions.\n- Static Analysis for Compatibility: The skill includes a scanning phase that examines project source code for Windows-specific dependencies. This helps identify potential issues before migrating workloads to the Linux-based Flex Consumption plan, allowing for proactive remediation.
Audit Metadata