azure-deploy@r1

CAUTION

Publisher claims: "Execute Azure deployments for ALREADY-PREPARED applications that have existing .azure/deployment-plan.md and infrastructure files. DO NOT use this skill when the user asks to CREATE a new application — use azure-prepare instead. This skill runs azd up, azd deploy, terraform apply, and az deployment commands with built-in error recovery. Requires .azure/deployment-plan.md from azure-prepare and validated status from azure-validate. WHEN: "run azd up", "run azd deploy", "execute deployment", "push to production", "push to cloud", "go live", "ship it", "bicep deploy", "terraform apply", "publish to Azure", "launch on Azure". DO NOT USE WHEN: "create and deploy", "build and deploy", "create a new app", "set up infrastructure", "create and deploy to Azure using Terraform" — use azure-prepare for these." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry skills.shPublisher microsoft · joined 2 days agoInstalls 565KLast detonated 31 h ago

Dispute verdict

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations

t+CategoryObserved action

0.0sprocessno install scripts in bundle

0.0sprocessscript backend runs setup only

Static findings

MEDIUM

Remote installer piped to shellreferences/sdk/azd-deployment.md:8 · Remote installer piped to shell

AST07

CRITICAL

Access to sensitive file pathsreferences/auth-best-practices.md:104 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Access to sensitive file pathsreferences/auth-best-practices.md:43 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Rule modification attemptreferences/global-rules.md:36 · Rule modification attempt — overwriting existing instructions

AST01

CRITICAL

Access to sensitive file pathsreferences/auth-best-practices.md:101 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Pipe-to-shell patternreferences/sdk/azd-deployment.md:8 · Pipe-to-shell pattern — downloads and immediately executes remote code

AST06

CRITICAL

Access to sensitive file pathsreferences/sdk/azd-deployment.md:19 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

CRITICAL

Rule modification attemptreferences/global-rules.md:5 · Rule modification attempt — overwriting existing instructions

AST01

HIGH

File permission modification commandreferences/recipes/azd/ef-migrations.md:96 · File permission modification command — agent changes file ownership/permissions

AST05

HIGH

File permission modification commandreferences/recipes/azd/sql-managed-identity.md:166 · File permission modification command — agent changes file ownership/permissions

AST05

CRITICAL

Access to sensitive file pathsreferences/auth-best-practices.md:105 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files

AST05

HIGH

File permission modification commandreferences/recipes/azd/ef-migrations.md:45 · File permission modification command — agent changes file ownership/permissions

AST05