discovery-services-starter-kit-deployer
Pass
Audited by Gen Agent Trust Hub on Oct 30, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- Standard Dependency Installation: The skill ensures its execution environment is prepared by installing well-known Python packages if they are missing.
- The deployment script uses
python -m pip installto fetchpyyamlandrequests. These are standard libraries used for configuration parsing and API communication. - Azure Resource Management: The skill leverages the Azure CLI (
az) and Docker for cloud infrastructure operations. - It uses
az account get-access-tokenfor authentication andaz restfor managing Discovery tool resources. - It supports
az acr buildfor remote container builds anddocker buildfor local image generation, which are routine operations for containerized deployments. - Dynamic Task Execution: To optimize deployment speed, the skill generates and executes temporary Python scripts for parallel processing.
- Scripts like
deploy_tools_parallel.pyanddeploy_agents_parallel.pyare written to the run directory to handle multiple resource updates simultaneously. - These scripts use standard Python modules such as
concurrent.futuresandsubprocessto manage deployment tasks. - Indirect Data Processing Surface: The skill reads and processes local configuration files, which is a common pattern for deployment automation.
- Ingestion points: The skill parses
kit.json,agent.yaml, andtool.yamlfiles from the repository'sstarter-kits/andagents/directories. - Boundary markers: The skill performs regex validation on identifiers like
knowledgeBaseIdandtoolResourceIdbefore including them in deployment payloads. - Capability inventory: The skill utilizes
pwsh,python,az, anddockerto perform file system operations, network requests to Azure endpoints, and process execution. - Sanitization: Payload generation involves structured JSON/YAML transformation rather than raw string interpolation, which helps maintain data integrity during the deployment process.
Audit Metadata