azure-enterprise-infra-planner

Pass

Audited by Gen Agent Trust Hub on Oct 5, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
  • Infrastructure Deployment Capabilities: The skill is designed to execute command-line tools to provision cloud resources. This activity is managed by a multi-phase gated pipeline requiring explicit user approval and risk acknowledgment before any destructive actions.
  • Secure-by-Default Infrastructure Generation: Instructions mandate that all generated infrastructure code follows security best practices, such as disabling public network access and using managed identities instead of static credentials.
  • Automated Security Scanning: The skill requires running a security scan and local validation tools on generated code, ensuring that potential security findings are resolved before deployment.
  • Indirect Prompt Injection Surface: As the skill processes user-supplied workload descriptions and existing infrastructure plans, it maintains a surface for external data ingestion. This is addressed by a structured workflow and a requirement for manual verification of the generated plan.
  • Trusted Resource References: All external documentation and resource links target official documentation domains, ensuring the information used for planning is from a reliable source.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 5, 2026, 06:29 PM