resilience-recovery-operations
Pass
Audited by Gen Agent Trust Hub on Sep 5, 2026
Risk Level: SAFE
Full Analysis
- Restricted Execution Environment: The skill explicitly restricts the agent to using only registered tools under the
resiliencenamespace for operational Azure requests. It prohibits the use of Azure CLI (az), direct REST calls, or SDK code as fallbacks, which significantly limits the potential for arbitrary command execution or unintended operations outside the intended scope. - Strict Identifier Handling: The operating rules require the agent to resolve identifiers through
getorlisttools rather than inventing them. This practice helps ensure that operations are performed on the intended resources and reduces the risk of accidental mutations or data mismatches. - User Authorization for Mutations: The skill mandates that mutations, especially irreversible ones like deletion, must be based on explicit user requests. It also requires the agent to report operation and job IDs, providing transparency and human-in-the-loop oversight for asynchronous tasks.
- Development Workflow Integrity: The provided development guidelines reference standard Azure and .NET tools and include procedures for recording and sanitizing tests. This structured approach helps prevent the accidental inclusion of sensitive information, such as credentials or tenant IDs, in test assets and recordings.
Audit Metadata