apiops-deployment
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements best practices for secure infrastructure deployment. It uses federated credentials (OIDC) in GitHub Actions (
azure/login@v2) to avoid long-lived service principal secrets and leverages System-Assigned Managed Identities for Azure resources to eliminate the need for hardcoded credentials. - [SAFE]: External references and tool calls target trusted official sources, including Microsoft's Azure Verified Modules and official Azure documentation. The CI/CD workflows use official, versioned GitHub Actions from the 'actions' and 'azure' organizations.
- [INDIRECT_PROMPT_INJECTION]: As a deployment guide, the skill ingests user-provided inputs for resource names, environment tags, and networking configurations. While it does not include explicit validation logic for these strings, it employs native Bicep and Terraform parameterization, which is the standard industry method for safely handling dynamic infrastructure configuration. The risk is assessed as minimal given the intended operational context.
Audit Metadata