OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Fail3 providerslatest audit Feb 16, 2026
Independent checks from skills.sh's audit partners.
The skill provides comprehensive guidance for using the Azure Developer CLI (azd) to deploy applications. While it explicitly warns against hardcoding secrets and promotes Managed Identity, it documents a powerful attack surface through the use of lifecycle hooks that execute arbitrary shell commands and the ingestion of infrastructure-as-code files.
Detected behaviors
No alerts
No issues