azure-deploy
microsoft/azure-skills
Execute Azure deployments for ALREADY-PREPARED applications that have existing .azure/deployment-plan.md and infrastructure files. DO NOT use this skill when the user asks to CREATE a new application — use azure-prepare instead. This skill runs azd up, azd deploy, terraform apply, and az deployment commands with built-in error recovery. Requires .azure/deployment-plan.md from azure-prepare and validated status from azure-validate. WHEN: \"run azd up\", \"run azd deploy\", \"execute deployment\",
1 finding, 1 high severity, in its 41 files.
What it does
- Runs shell commands
- Installs packages
- Reaches aka.ms, api-xxxx.azurecontainerapps.io, apiservice.xxx.azurecontainerapps.io, aspire-dashboard.xxx.azurecontainerapps.io, azure.microsoft.com, learn.microsoft.com, myapp.azurewebsites.net, schema.management.azure.com
- Reads ACR_ID, ACR_NAME, ACR_PASS, ACR_SERVER, ACR_USER, APP_NAME, APP_PROJECT_PATH, AUTH_TYPE, AZURE_CLIENT_ID, AZURE_ENV_NAME, AZURE_FUNCTIONS_ENVIRONMENT, AZURE_LOCATION, AZURE_RESOURCE_GROUP, AZURE_SUBSCRIPTION_ID, CONNECTION_STRING, ENDPOINT, FQDN, HOME, HOSTNAME, LASTEXITCODE, NODE_ENV, PATH, PRINCIPAL_ID, RG_NAME, ROLE, SERVICE_API_NAME, SERVICE_WEB_NAME, SQL_DATABASE, SQL_SERVER, STORAGE_SKU, USERPROFILE, VAR
- Writes ./src/, .azurecr.io, .azurecr.io/, .azurecr.io/myapp, .azurewebsites.net/api/, /, /health, 1.15.0, com.azure
Findings (1)
HighDownloads and executes remote code
Code fetched at run time is executed without being reviewed or pinned; whoever controls that URL controls every machine running the skill.
references/sdk/azd-deployment.md:8
Decide which skills your team's agents may run
skillsvault scans every skill your organisation uses, blocks the ones you ban on every developer's machine, and keeps a tamper-evident record of every run. Free for one developer.
A deterministic scan of the skill's files as published today; it isn't a guarantee. It reads the files and reports what they do — nothing is run or installed.