create-modernization-plan
Pass
Audited by Gen Agent Trust Hub on Sep 5, 2026
Risk Level: SAFE
Full Analysis
- Structured Modernization Workflow: The skill implements a robust, multi-step process for generating migration plans, including user input processing, context loading via language-specific guidelines, and clarification through user interaction. This structure helps ensure that the generated plans are accurate and relevant to the specific project needs.
- Mandatory Security Integration: A notable feature is the automated inclusion of a security/CVE remediation task in every plan. This ensures that dependency scanning and vulnerability fixing are prioritized during the modernization process, reducing the risk of deploying insecure applications to the cloud.
- Scoped Infrastructure and Deployment: The skill intelligently manages infrastructure and deployment tasks, only generating complex IaC (Infrastructure as Code) plans when explicitly requested and using appropriate templates for different Azure services like Container Apps, AKS, and App Service.
- Language-Specific Best Practices: By utilizing separate guideline files for .NET and Java, the skill ensures compliance with platform-specific requirements, such as .NET LTS versioning and Java framework compatibility (e.g., Jakarta EE migration), which is critical for a successful migration.
- Controlled Command Execution: While the skill defines patterns that involve command-line tools (like
azcli), these are documented as standard deployment operations. The workflow emphasizes generating a plan rather than automatic execution unless specifically authorized by the user, providing a safety buffer.
Audit Metadata