azure-cloud-migrate
Pass
Audited by Gen Agent Trust Hub on Mar 6, 2026
Risk Level: SAFE
Full Analysis
- Identity-First Authentication: The skill explicitly discourages the use of hardcoded API keys and connection strings, instead promoting the use of User Assigned Managed Identities (UAMI) and the
DefaultAzureCredentiallibrary. - Workflow Safety Policies: Includes a robust 'Destructive Action Policy' that requires explicit user confirmation via
ask_userbefore performing any operations that modify or delete existing code or resources. - Official Tooling and Best Practices: Integrates official Azure MCP tools (
mcp_azure_mcp_get_bestpracticesandmcp_azure_mcp_documentation) to ensure that generated code adheres to current architectural standards. - Secure External Resource Usage: References well-known Azure SDKs and official documentation. The use of
azd initfor template initialization is a standard practice for Azure development environments. - Data Ingestion Context: While the skill processes user-provided source code (which is an ingestion point for external data), it operates within a structured migration workflow designed to produce assessment reports and new code in a isolated output directory.
Audit Metadata