cloud-native-deploy

Pass

Audited by Gen Agent Trust Hub on Aug 13, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill references and installs official tools from well-known sources, including the Azure Developer CLI via package managers (winget, brew) and an official template from the Azure-Samples GitHub repository.
  • [COMMAND_EXECUTION]: Provides standard deployment commands using official tools like azd, az, docker, and dotnet. These commands are expected for the skill's stated purpose of cloud-native deployment.
  • [SAFE]: Docker configurations use official images from the Microsoft Container Registry (mcr.microsoft.com). Environment variable configurations follow standard development patterns, such as using default local credentials for development databases.
  • [SAFE]: The GitHub Actions workflow uses official, versioned actions from Microsoft and GitHub (actions/checkout@v4, actions/setup-dotnet@v4, azure/login@v2).
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 13, 2026, 10:14 AM
Security Audit — agent-trust-hub — cloud-native-deploy