azure-upgrade
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFE
Full Analysis
- Security Control Preservation: The skill includes mandatory steps to review code changes for the preservation of security controls, such as authentication mechanisms, authorization policies, and audit logging. This ensures that the modernization process does not inadvertently weaken the application's security posture.
- User Confirmation Policy: A strict policy is in place requiring explicit user confirmation before any destructive actions, such as deleting resources, or irreversible configuration changes. This maintains human oversight over significant infrastructure modifications.
- Identity-First Approach: The instructions prioritize the use of managed identities and modern authentication patterns over connection strings and long-lived secrets. This aligns with modern security best practices for cloud resource access.
- Automated Dependency Management: The included Python script automates the migration of Azure SDK dependencies using OpenRewrite. This reduces the risk of manual configuration errors during the upgrade process.
- External Configuration Retrieval: The skill fetches the latest Azure SDK Bill of Materials (BOM) configuration from an official Microsoft repository on GitHub. This is used to ensure the migration targets the most recent stable versions of the SDK.
- Command Execution: The skill utilizes standard build tools like Maven and Gradle via a Python script to automate dependency updates. These operations are performed using safe execution patterns that avoid shell injection risks.
Audit Metadata