skills/pmq9/agent-skills/iac-bicep/Gen Agent Trust Hub

iac-bicep

Pass

Audited by Gen Agent Trust Hub on May 14, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides purely instructional content and technical documentation for Azure Bicep development.
  • [SAFE]: It explicitly recommends secure secret management practices, such as using the @secure() decorator, the getSecret function for Key Vault references, and readEnvironmentVariable to avoid hardcoding credentials in template files.
  • [SAFE]: The skill promotes the use of official and well-known module sources, specifically recommending Azure Verified Modules (AVM) from Microsoft's public Bicep registry.
  • [SAFE]: It outlines a secure CI/CD workflow using OIDC federated identities and automated validation tools like bicep lint and PSRule for Azure to enforce policy compliance before deployment.
Audit Metadata
Risk Level
SAFE
Analyzed
May 14, 2026, 10:58 PM