python-appservice-deploy
Pass
Audited by Gen Agent Trust Hub on Aug 3, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- Standard Azure CLI Operations: The skill utilizes
azandazdcommand-line tools to manage Azure resources (Resource Groups, App Service Plans, and Web Apps). These are standard administrative actions for the intended deployment purpose. - Shell Safety Best Practices: The instructions explicitly warn against using the pipe character (
|) in runtime strings (e.g., usingPYTHON:3.14instead ofPYTHON|3.14) to prevent accidental shell operator execution in various environments. - Idempotent Resource Management: Resource creation steps use a
show || createpattern, ensuring that existing user resources are not overwritten and reducing the risk of accidental resource duplication. - Local Script Execution: The skill includes helper scripts (
generate-app-name.sh/ps1andretry-az-create.sh/ps1) to handle naming conventions and transient network errors. These scripts perform local string manipulation and retry logic for official API calls. - Deployment Scoping: The skill correctly excludes sensitive local files like
.envand.gitfrom the deployment zip package, following security best practices for cloud deployments.
Audit Metadata