Skills/skills.sh/azure-app-onboard

azure-app-onboard@r1

CAUTION

Publisher claims: "End-to-end orchestrator: from a business idea, app idea, or existing app to running Azure deployment with cost estimates and pre-deploy approval. Analyzes your app, auto-detects the right Azure services, scaffolds infrastructure code, and deploys — tailored to your app, not a template. Handles moving existing apps to Azure without rewriting or with minimal changes. WHEN: bring your app to Azure, plan my app, cost to run, is my code ready to deploy, deploy my app to the cloud, deploy all my services, what Azure services do I need, plan my Azure deployment, deploy my new app to Azure, one-click deploy, I have an app and want it on Azure, migrate my app to Azure, help me get started, build an app, no code yet, starter project. DO NOT USE FOR: use azd for deployment(use azure-deploy), optimizing existing costs (use cost-optimization), code readiness checks only (use azure-app-onboard-prereq)." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry skills.shPublisher microsoft · joined 2 days agoInstalls 150KLast detonated 39 h ago
Dispute verdict

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only

Static findings

CRITICAL
Credential pass-through configurationdeploy/references/blocked-patterns.md:26 · Credential pass-through configuration — agent relays sensitive credentials
AST02
CRITICAL
Credential pass-through configurationreferences/pipeline-rules-runtime.md:17 · Credential pass-through configuration — agent relays sensitive credentials
AST02
CRITICAL
Access to sensitive file pathsdeploy/references/code-deployment-container-apps.md:52 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsdeploy/SKILL.md:49 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsdeploy/references/database-post-deploy.md:51 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsdeploy/references/database-post-deploy.md:13 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsdeploy/references/deploy-safety.md:38 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsdeploy/references/code-deployment-swa.md:19 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
npx invocation of non-well-known packagedeploy/references/code-deployment-swa.md:7 · npx invocation of non-well-known package — may execute untrusted code
AST06
MEDIUM
File type combined with upload actiondeploy/references/code-deployment-swa.md:19 · File type combined with upload action — agent may exfiltrate local data files
AST07
MEDIUM
File type combined with upload actionscaffold/SKILL.md:61 · File type combined with upload action — agent may exfiltrate local data files
AST07
MEDIUM
File type combined with upload actiondeploy/references/deploy-checklist-template.md:68 · File type combined with upload action — agent may exfiltrate local data files
AST07
MEDIUM
File type combined with upload actiondeploy/references/subagent-preflight.md:38 · File type combined with upload action — agent may exfiltrate local data files
AST07
CRITICAL
Credential pass-through configurationscaffold/references/bicep-app-service.md:104 · Credential pass-through configuration — agent relays sensitive credentials
AST02
MEDIUM
File type combined with upload actiondeploy/references/deploy-checklist-template.md:60 · File type combined with upload action — agent may exfiltrate local data files
AST07
MEDIUM
File type combined with upload actiondeploy/references/deploy-checklist-template.md:93 · File type combined with upload action — agent may exfiltrate local data files
AST07
MEDIUM
File type combined with upload actionscaffold/references/iac-generation-rules.md:9 · File type combined with upload action — agent may exfiltrate local data files
AST07
CRITICAL
Access to sensitive file pathsscaffold/references/dockerfile-generation.md:40 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
MEDIUM
File type combined with upload actiondeploy/references/database-post-deploy.md:13 · File type combined with upload action — agent may exfiltrate local data files
AST07
MEDIUM
File type combined with upload actionscaffold/references/rbac-roles.md:45 · File type combined with upload action — agent may exfiltrate local data files
AST07
HIGH
npx invocation of non-well-known packagedeploy/references/database-post-deploy.md:21 · npx invocation of non-well-known package — may execute untrusted code
AST06
MEDIUM
File type combined with upload actiondeploy/references/subagent-preflight.md:50 · File type combined with upload action — agent may exfiltrate local data files
AST07
MEDIUM
File type combined with upload actionreferences/pipeline-rules.md:67 · File type combined with upload action — agent may exfiltrate local data files
AST07
MEDIUM
File type combined with upload actionreferences/session-protocol.md:56 · File type combined with upload action — agent may exfiltrate local data files
AST07
MEDIUM
File type combined with upload actionscaffold/references/iac-generation-rules.md:67 · File type combined with upload action — agent may exfiltrate local data files
AST07
CRITICAL
Access to sensitive file pathsscaffold/references/env-var-secrets.md:7 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
MEDIUM
File type combined with upload actiondeploy/references/health-check-patterns.md:95 · File type combined with upload action — agent may exfiltrate local data files
AST07
MEDIUM
File type combined with upload actionscaffold/references/env-var-secrets.md:43 · File type combined with upload action — agent may exfiltrate local data files
AST07
MEDIUM
File type combined with upload actionprepare/SKILL.md:56 · File type combined with upload action — agent may exfiltrate local data files
AST07
MEDIUM
File type combined with upload actionreferences/intent-gathering.md:29 · File type combined with upload action — agent may exfiltrate local data files
AST07
CRITICAL
Access to sensitive file pathsscaffold/references/dockerfile-generation.md:45 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsscaffold/references/iac-generation-rules.md:13 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
CRITICAL
Access to sensitive file pathsscaffold/references/dockerfile-generation.md:62 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
Coercive compliance languagedeploy/references/code-deployment-container-apps.md:7 · Coercive compliance language
AST01
MEDIUM
File type combined with upload actionscaffold/references/bicep-patterns.md:105 · File type combined with upload action — agent may exfiltrate local data files
AST07
HIGH
npx invocation of non-well-known packagedeploy/references/database-post-deploy.md:24 · npx invocation of non-well-known package — may execute untrusted code
AST06
MEDIUM
File type combined with upload actionreferences/approval-gates.md:63 · File type combined with upload action — agent may exfiltrate local data files
AST07
MEDIUM
File type combined with upload actionreferences/handoff-protocol.md:29 · File type combined with upload action — agent may exfiltrate local data files
AST07