skills/microsoft/skills/azure-deploy/Gen Agent Trust Hub

azure-deploy

Pass

Audited by Gen Agent Trust Hub on Mar 23, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
  • [Remote Tool Installation]: The skill provides instructions to download and execute the Azure Developer CLI installation script from a Microsoft domain. This is a standard procedure for setting up the required environment for Azure deployments.
  • [Cloud Infrastructure Management]: The skill facilitates the execution of various CLI tools, including Azure CLI and Terraform, to provision and manage cloud resources. These operations are essential for the skill's primary function of application deployment.
  • [Safeguards for Destructive Actions]: Explicit protocols are defined requiring the agent to seek user confirmation before performing actions that result in resource deletion or environment purging, helping prevent accidental infrastructure loss.
  • [Authentication Best Practices]: Extensive documentation is provided to guide users toward secure authentication methods, such as Managed Identities, and away from less secure practices like hardcoded credentials.
  • [Dynamic Configuration Loading]: Shell scripts within the deployment recipes use command substitution and evaluation to load environment variables from the local deployment context. This allows for dynamic configuration of database connection strings and migration tasks.
  • [Untrusted Data Surface]: The skill relies on configuration files such as project plans and infrastructure templates. While these provide the context for deployment, the skill includes manual verification steps and prerequisite checks to ensure the integrity of the deployment process.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 23, 2026, 06:02 PM