azure-deploy
Pass
Audited by Gen Agent Trust Hub on May 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- Managed Deployment Execution: The skill automates complex infrastructure deployments using standard CLI tools. It includes mandatory prerequisite checks and user confirmation for destructive actions like resource deletion, as seen in the global rules reference.
- Verified External Resource Access: Deployment instructions include fetching a developer CLI installer from the official provider's domain (
aka.ms). This facilitates tool setup using verified distribution channels. - Automated Tool Provisioning: To support database migrations, provided scripts may install developer tools globally from official registries. This ensures the environment is prepared for application lifecycle management.
- Dynamic Command and SQL Generation: Post-deployment scripts dynamically construct SQL queries for role assignments and connection strings for database updates. These are standard operations for configuring identity-based access in cloud environments.
- Deployment Plan Data Ingestion: The skill consumes a local deployment plan file to guide its execution workflow.
- Ingestion points: Processes the
.azure/deployment-plan.mdfile and CLI tool outputs. - Boundary markers: Instructions mandate verifying 'Validation Proof' sections within the plan before execution.
- Capability inventory: Executes deployment commands and database queries through authorized system tools.
- Sanitization: Utilizes shell environment variable management for data handling within automation scripts.
Audit Metadata