python-appservice-deploy
Pass
Audited by Gen Agent Trust Hub on Nov 9, 2026
Risk Level: SAFE
Full Analysis
- **[Safe Operation
- Azure Deployment]:** The skill automates the deployment of Python applications (Flask, Django, FastAPI) to Azure App Service using official Microsoft tools (
azCLI andazd). It follows recommended security practices by enforcing server-side builds (SCM_DO_BUILD_DURING_DEPLOYMENT=true), which ensures dependencies are managed within the secure cloud environment rather than local environments. - **[Safe Operation
- Infrastructure Management]:** The skill manages Azure resources (Resource Groups, App Service Plans, and Web Apps) using idempotent patterns (
show || create). This prevents accidental overwriting of existing resources and ensures that deployments are consistent and predictable. - **[Safe Operation
- Transient Error Handling]:** It includes dedicated scripts (
retry-az-create.shandretry-az-create.ps1) to handle transient network and API errors (e.g., HTTP 429, 502, 503). These scripts use a controlled retry mechanism with exponential backoff and only target specific, safe-to-retry error codes, avoiding retries on sensitive issues like authentication failures. - **[Safe Operation
- Input Validation and Normalization]:** The skill implements a Python-based normalization step for Linux shell scripts. This process ensures that line endings are converted to LF and validates that no null bytes are present, preventing common deployment failures and potential execution issues related to cross-platform character encoding.
Audit Metadata