azure-validate
Pass
Audited by Gen Agent Trust Hub on Mar 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- Infrastructure Validation Commands: The skill executes several standard CLI commands (such as
az bicep build,terraform validate, andazd provision --preview) to verify infrastructure templates. These are essential for the skill's purpose of ensuring deployment readiness. - Managed CLI Installation: Use of the
mcp_azure_mcp_extension_cli_installtool allows the agent to install necessary command-line interfaces like the Azure CLI (az) and Azure Developer CLI (azd) if they are missing. This is a functional requirement for performing the requested validations. - Safety-First Confirmation Rules: The skill includes a global policy requiring explicit user consent via
ask_userbefore performing any destructive or irreversible operations, such as deleting resources or modifying access policies. This helps prevent accidental data loss or configuration errors. - Structured Environment Management: The environment setup process includes logic to prevent naming conflicts and ensures that the agent never assumes a target subscription or region without explicit confirmation from the user.
- Integration of Policy Checks: The skill incorporates Azure Policy validation using specialized platform tools to ensure that proposed deployments comply with organizational governance and security requirements before they are executed.
Audit Metadata