azure-app-onboard
Pass
Audited by Gen Agent Trust Hub on Jul 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
- Standard Security Configuration: The skill automatically configures Azure resources with secure-by-default settings, such as enforcing HTTPS, disabling basic FTP authentication, and utilizing Managed Identity to eliminate the need for hardcoded credentials.
- Robust Secret Management: It identifies and handles secrets by seeding them directly into Azure Key Vault and referencing them in Infrastructure-as-Code (IaC) via secure parameters, preventing sensitive information from appearing in deployment logs or source control.
- Deployment Guardrails: A structured 'Blocked Patterns' list prevents the execution of high-risk commands like broad file deletions or forced git operations, protecting the user's workspace and existing cloud infrastructure.
- Transparent Orchestration: The workflow is partitioned into logical phases with distinct approval gates. This allows users to inspect proposed architecture changes and cost estimates before any resources are provisioned.
- Secure Local State Handling: All session artifacts and temporary data are stored in a dedicated folder that is automatically added to the repository's
.gitignorefile, ensuring that deployment metadata remains local to the user's environment.
Audit Metadata