azure-app-onboard
Pass
Audited by Gen Agent Trust Hub on Aug 3, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [Infrastructure Orchestration]: The skill automates the creation and deployment of Azure resources using Bicep or Terraform. It utilizes the Azure CLI (
az) to interact with the platform, requiring explicit user confirmation before any modifications or deployments occur. - [Secure Resource Configuration]: The generated infrastructure code follows 'secure-by-default' principles. This includes disabling insecure protocols like FTP, enforcing HTTPS and TLS 1.2+, and leveraging Azure Managed Identities to eliminate the need for hardcoded credentials.
- [Secret Management]: Secrets are managed through Azure Key Vault. The skill automatically generates secure values and seeds them into the vault, referencing them in the application configuration via secure links rather than plaintext values.
- [Official Tool Integration]: The skill utilizes the Azure Static Web Apps CLI (
@azure/static-web-apps-cli), which may be installed from the official npm registry if required. This interaction is consistent with the skill's purpose of enabling frontend deployments. - [Cloud Service Communication]: To provide accurate architecture planning and cost estimates, the skill queries official Azure APIs, such as the Retail Prices API (
prices.azure.com) and resource management endpoints (management.azure.com).
Audit Metadata