python-appservice-deploy

Pass

Audited by Gen Agent Trust Hub on Aug 3, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • Standard Azure CLI Operations: The skill utilizes az and azd command-line tools to manage Azure resources (Resource Groups, App Service Plans, and Web Apps). These are standard administrative actions for the intended deployment purpose.
  • Shell Safety Best Practices: The instructions explicitly warn against using the pipe character (|) in runtime strings (e.g., using PYTHON:3.14 instead of PYTHON|3.14) to prevent accidental shell operator execution in various environments.
  • Idempotent Resource Management: Resource creation steps use a show || create pattern, ensuring that existing user resources are not overwritten and reducing the risk of accidental resource duplication.
  • Local Script Execution: The skill includes helper scripts (generate-app-name.sh/ps1 and retry-az-create.sh/ps1) to handle naming conventions and transient network errors. These scripts perform local string manipulation and retry logic for official API calls.
  • Deployment Scoping: The skill correctly excludes sensitive local files like .env and .git from the deployment zip package, following security best practices for cloud deployments.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 3, 2026, 09:39 AM
Security Audit — agent-trust-hub — python-appservice-deploy