iac-bicep
Pass
Audited by Gen Agent Trust Hub on May 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides purely instructional content and technical documentation for Azure Bicep development.
- [SAFE]: It explicitly recommends secure secret management practices, such as using the
@secure()decorator, thegetSecretfunction for Key Vault references, andreadEnvironmentVariableto avoid hardcoding credentials in template files. - [SAFE]: The skill promotes the use of official and well-known module sources, specifically recommending Azure Verified Modules (AVM) from Microsoft's public Bicep registry.
- [SAFE]: It outlines a secure CI/CD workflow using OIDC federated identities and automated validation tools like
bicep lintand PSRule for Azure to enforce policy compliance before deployment.
Audit Metadata