azure-enterprise-infra-planner
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- Infrastructure Deployment Capabilities: The skill is designed to execute command-line tools to provision cloud resources. This activity is managed by a multi-phase gated pipeline requiring explicit user approval and risk acknowledgment before any destructive actions.
- Secure-by-Default Infrastructure Generation: Instructions mandate that all generated infrastructure code follows security best practices, such as disabling public network access and using managed identities instead of static credentials.
- Automated Security Scanning: The skill requires running a security scan and local validation tools on generated code, ensuring that potential security findings are resolved before deployment.
- Indirect Prompt Injection Surface: As the skill processes user-supplied workload descriptions and existing infrastructure plans, it maintains a surface for external data ingestion. This is addressed by a structured workflow and a requirement for manual verification of the generated plan.
- Trusted Resource References: All external documentation and resource links target official documentation domains, ensuring the information used for planning is from a reliable source.
Audit Metadata