azure-deploy
Pass
Audited by Gen Agent Trust Hub on Apr 15, 2026
Risk Level: SAFE
Full Analysis
- [Secure Authentication Patterns]: The skill strongly encourages the use of Azure Managed Identities and Role-Based Access Control (RBAC) for production environments, steering users away from hardcoded credentials or broad-access tokens. Use of the ManagedIdentityCredential class is recommended to ensure deterministic and secure authentication flows in cloud environments.\n- [User Confirmation for Destructive Actions]: Mandatory rules are in place requiring the agent to use
ask_userbefore performing irreversible or costly operations, such as resource deletion, resource group removal, or subscription selection, ensuring high levels of human oversight.\n- [External Dependency Management]: The skill documents the installation of official CLI tools and developer utilities. These downloads originate from verified domains (such as aka.ms and NuGet), which are established sources for development tooling and official software distributions.\n- [Workflow Validation]: The deployment process is gated by prerequisite checks that require a validated deployment plan from preceding steps, ensuring that infrastructure code and configuration have been verified before execution begins.\n- [Safe Scripting Practices]: Included shell and PowerShell scripts for database migrations use robust parsing logic when loading environment variables from the Azure Developer CLI to prevent unintended shell interpretation or command injection.
Audit Metadata