azure-deploy

Pass

Audited by Gen Agent Trust Hub on Nov 8, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill downloads the Azure Developer CLI (azd) installation script from Microsoft's official aka.ms domain. It also installs standard development tools like dotnet-ef from the NuGet registry and the rdbms-connect Azure CLI extension from Microsoft's official extension registry. These operations target trusted sources and are essential for the skill's deployment tasks.
  • [COMMAND_EXECUTION]: The skill executes shell and PowerShell scripts for database migrations and SQL permission management. These scripts use safe parsing techniques for environment variables (avoiding eval on untrusted input) and are intended to be run as part of the project's standard azd deployment lifecycle.
  • [INDIRECT_PROMPT_INJECTION]: The skill reads project-level configuration files such as azure.yaml, .azure/deployment-plan.md, and infrastructure templates (Bicep/Terraform). While these files influence the deployment process, they are treated as local project assets authored by the user or the azure-prepare skill, and the skill implements strict checklists to ensure the user remains in control of critical deployment parameters.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 8, 2026, 10:45 PM