azure-validate

Pass

Audited by Gen Agent Trust Hub on Mar 27, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • Infrastructure Validation Commands: The skill executes several standard CLI commands (such as az bicep build, terraform validate, and azd provision --preview) to verify infrastructure templates. These are essential for the skill's purpose of ensuring deployment readiness.
  • Managed CLI Installation: Use of the mcp_azure_mcp_extension_cli_install tool allows the agent to install necessary command-line interfaces like the Azure CLI (az) and Azure Developer CLI (azd) if they are missing. This is a functional requirement for performing the requested validations.
  • Safety-First Confirmation Rules: The skill includes a global policy requiring explicit user consent via ask_user before performing any destructive or irreversible operations, such as deleting resources or modifying access policies. This helps prevent accidental data loss or configuration errors.
  • Structured Environment Management: The environment setup process includes logic to prevent naming conflicts and ensures that the agent never assumes a target subscription or region without explicit confirmation from the user.
  • Integration of Policy Checks: The skill incorporates Azure Policy validation using specialized platform tools to ensure that proposed deployments comply with organizational governance and security requirements before they are executed.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 27, 2026, 01:21 AM