azure-webapp-config
Pass
Audited by Gen Agent Trust Hub on Jun 17, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The Python script
scripts/set_appsettings.pyexecutesaz webapp configcommands to update application settings. The implementation correctly usessubprocess.runwith an argument list rather than a shell string, effectively mitigating shell injection risks. - [SAFE]: The skill is designed for administrative tasks and operates on local configuration files (
.env,profiles.tsv) provided by the user or defined in the skill repository. No evidence of data exfiltration, obfuscation, or malicious intent was detected. The code includes clear guidance on using Key Vault references for sensitive secrets.
Audit Metadata