skillhash

Is azure-app-onboard-prereq safe?

Grade A, 100/100. No meaningful risk found.

Assess whether source code is ready to deploy to Azure — the check BEFORE infrastructure work. Evaluates build health, app completeness, dependencies and local services, stack compatibility, and deployment feasibility. Answers questions about what your app needs before it can be deployed — frameworks, dependencies, and configuration. Checks whether dependencies are compatible and identifies deployment blockers and unsupported frameworks. WHEN: "evaluate my repo", "is my app ready to deploy", "what does my app need to deploy", "what do I need before deploying", "does my app need", "can I ship this to Azure", "scan my repo for issues", "is this app deployable", "check if my app is ready for Azure", "do I need a Dockerfile", "what's blocking my deployment", "are there any blockers", "are my dependencies compatible", "does Azure support my framework", "what needs to change before deploying", "check my app configuration".

microsoft/azure-skills/.github/plugins/azure-skills/skills/azure-app-onboard-prereq 1.6kChecked 3h agoContent last changed 3h ago
A

azure-app-onboard-prereq

.github/plugins/azure-skills/skills/azure-app-onboard-prereq
100/100 · No meaningful risk foundNo security findings

Assess whether source code is ready to deploy to Azure — the check BEFORE infrastructure work. Evaluates build health, app completeness, dependencies and local services, stack compatibility, and deployment feasibility. Answers questions about what your app needs before it can be deployed — frameworks, dependencies, and configuration. Checks whether dependencies are compatible and identifies deployment blockers and unsupported frameworks. WHEN: "evaluate my repo", "is my app ready to deploy", "what does my app need to deploy", "what do I need before deploying", "does my app need", "can I ship this to Azure", "scan my repo for issues", "is this app deployable", "check if my app is ready for Azure", "do I need a Dockerfile", "what's blocking my deployment", "are there any blockers", "are my dependencies compatible", "does Azure support my framework", "what needs to change before deploying", "check my app configuration".

Content hash
sha256:7760d665ec56455d15bd5140a55918d9df9e1f80c1f6da0ee8a2c189ac0e9f6b
Files
16
Quality
100/100

Security findings

  • infoUnpinned package installSL501 · .github/plugins/azure-skills/skills/azure-app-onboard-prereq/references/dependency-compatibility.md:122
    | Prisma | `@prisma/client` + `prisma/schema.prisma` | `npx prisma migrate deploy` |

    Installing without a version means a future malicious release lands automatically. Fix: Pin an exact version (pkg==1.2.3, pkg@1.2.3). Severity lowered: the line reads as documentation, not an instruction.

  • infoUnpinned package installSL501 · .github/plugins/azure-skills/skills/azure-app-onboard-prereq/references/dependency-compatibility.md:123
    | TypeORM | `typeorm` + `migrations/`/`ormconfig` | `npx typeorm migration:run` |

    Installing without a version means a future malicious release lands automatically. Fix: Pin an exact version (pkg==1.2.3, pkg@1.2.3). Severity lowered: the line reads as documentation, not an instruction.

  • infoUnpinned package installSL501 · .github/plugins/azure-skills/skills/azure-app-onboard-prereq/references/dependency-compatibility.md:124
    | Sequelize | `sequelize` + `migrations/` | `npx sequelize-cli db:migrate` |

    Installing without a version means a future malicious release lands automatically. Fix: Pin an exact version (pkg==1.2.3, pkg@1.2.3). Severity lowered: the line reads as documentation, not an instruction.

Files in this skill
  • SKILL.md10.0 KB
  • references/build-check.md5.7 KB
  • references/cloud-sdk-migration.md2.2 KB
  • references/completeness-check.md4.4 KB
  • references/component-mapping.md4.6 KB
  • references/dependency-compatibility.md9.0 KB
  • references/deployability-check.md3.1 KB
  • references/prereq-artifacts.md2.3 KB
  • references/prereq-schemas.ts4.1 KB
  • references/readiness-gate.md5.4 KB
  • references/remediation-protocol.md3.6 KB
  • references/session-protocol.md7.4 KB
  • references/session-schemas.ts5.2 KB
  • references/subagent-starter-scaffold.md4.0 KB
  • references/subscription-resolution.md1.8 KB
  • references/zero-code-path.md3.6 KB

Questions about azure-app-onboard-prereq

Is azure-app-onboard-prereq safe to install?
Our scanner gave azure-app-onboard-prereq grade A (100/100): no meaningful risk found. None of the 30 security rules matched. Static analysis cannot prove safety, so pin the reviewed revision with a lockfile.
How do I install azure-app-onboard-prereq in Claude Code or Codex?
Run skillhash add github:microsoft/azure-skills/.github/plugins/azure-skills/skills/azure-app-onboard-prereq. It downloads the exact commit, checks the grade against your policy, writes skills.lock and installs it into .claude/skills and .agents/skills.
What happens if azure-app-onboard-prereq changes upstream?
Its content hash changes. skillhash verify fails in CI until you review the new version and update the lock. With a watch, you also get an alert.

More from microsoft/azure-skills