azure-webapp-config

Pass

Audited by Gen Agent Trust Hub on Jun 17, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The Python script scripts/set_appsettings.py executes az webapp config commands to update application settings. The implementation correctly uses subprocess.run with an argument list rather than a shell string, effectively mitigating shell injection risks.
  • [SAFE]: The skill is designed for administrative tasks and operates on local configuration files (.env, profiles.tsv) provided by the user or defined in the skill repository. No evidence of data exfiltration, obfuscation, or malicious intent was detected. The code includes clear guidance on using Key Vault references for sensitive secrets.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 17, 2026, 04:18 PM
Security Audit — agent-trust-hub — azure-webapp-config