azure-deploy

Pass

Audited by Gen Agent Trust Hub on Oct 2, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [Trusted Tool Installation]: The skill facilitates the setup of official deployment tools via remote scripts from established vendor domains. This is a common and safe pattern for establishing a local development and deployment environment.
  • [Credential Management Best Practices]: The skill actively promotes the transition from secret-based authentication to identity-based authentication (Managed Identities). This alignment with modern security standards significantly reduces the risk of credential exposure.
  • [Operational Guardrails]: The skill mandates human verification for critical deployment parameters, such as the target Azure subscription and region, and enforces explicit confirmation for destructive commands like azd down.
  • [Infrastructure Ingestion Surface]: The skill reads project-specific configuration from .azure/deployment-plan.md. This represents a data ingestion surface. The skill includes mitigation steps by requiring the plan to contain specific validation proof and status markers before proceeding with any deployment tasks.
  • [Secure Post-Deployment Automation]: Provided automation scripts for database schema updates use official Azure extensions and secure credential-less authentication patterns, ensuring that application setup is both automated and secure.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 2, 2026, 09:00 AM