azure-deploy
Pass
Audited by Gen Agent Trust Hub on Nov 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads the Azure Developer CLI (azd) installation script from Microsoft's official
aka.msdomain. It also installs standard development tools likedotnet-effrom the NuGet registry and therdbms-connectAzure CLI extension from Microsoft's official extension registry. These operations target trusted sources and are essential for the skill's deployment tasks. - [COMMAND_EXECUTION]: The skill executes shell and PowerShell scripts for database migrations and SQL permission management. These scripts use safe parsing techniques for environment variables (avoiding
evalon untrusted input) and are intended to be run as part of the project's standardazddeployment lifecycle. - [INDIRECT_PROMPT_INJECTION]: The skill reads project-level configuration files such as
azure.yaml,.azure/deployment-plan.md, and infrastructure templates (Bicep/Terraform). While these files influence the deployment process, they are treated as local project assets authored by the user or theazure-prepareskill, and the skill implements strict checklists to ensure the user remains in control of critical deployment parameters.
Audit Metadata