skillhash

Is azure-reliability safe?

Grade A, 96/100. No meaningful risk found.

Assess and improve the reliability posture of PaaS Applications (Azure Functions and Azure App Service). Scans deployed resources for zone redundancy, ZRS storage, health probes, and multi-region failover. Presents a feature-pivoted checklist, then drives staged remediation (CLI or IaC patches) end-to-end with user confirmation. WHEN: "assess reliability", "check reliability", "zone redundant", "multi-region failover", "high availability", "disaster recovery", "single points of failure", "reliability posture", "resiliency".

microsoft/azure-skills/.github/plugins/azure-skills/skills/azure-reliability 1.6kChecked 3h agoContent last changed 3h ago
A

azure-reliability

.github/plugins/azure-skills/skills/azure-reliability
96/100 · No meaningful risk found5 low

Assess and improve the reliability posture of PaaS Applications (Azure Functions and Azure App Service). Scans deployed resources for zone redundancy, ZRS storage, health probes, and multi-region failover. Presents a feature-pivoted checklist, then drives staged remediation (CLI or IaC patches) end-to-end with user confirmation. WHEN: "assess reliability", "check reliability", "zone redundant", "multi-region failover", "high availability", "disaster recovery", "single points of failure", "reliability posture", "resiliency".

Content hash
sha256:cbb8b6237bc3a5ceb26cfd5a661d80c371db8e56b39c60630df1f0de3bc17fbe
Files
13
Quality
100/100

Security findings

  • lowHides actions from the userSL102 · .github/plugins/azure-skills/skills/azure-reliability/SKILL.md:247
    After patching, **the skill runs the deploy itself** (do not stop and tell the user to run it). Detect the deployment tool and confirm once before executing:

    The skill asks the agent to act without the user's knowledge. Fix: Every side effect should be visible to the user. Remove the concealment instruction. Severity lowered: the line reads as documentation, not an instruction.

  • lowHides actions from the userSL102 · .github/plugins/azure-skills/skills/azure-reliability/SKILL.md:286
    The skill runs these commands itself — do not ask the user to run them. Show progress as you go:

    The skill asks the agent to act without the user's knowledge. Fix: Every side effect should be visible to the user. Remove the concealment instruction. Severity lowered: the line reads as documentation, not an instruction.

  • lowHides actions from the userSL102 · .github/plugins/azure-skills/skills/azure-reliability/SKILL.md:348
    3. On **yes**, **the skill runs the deploy itself** (`azd up` / `az deployment group create` / `terraform apply`) and streams output. Do not stop and tell the …

    The skill asks the agent to act without the user's knowledge. Fix: Every side effect should be visible to the user. Remove the concealment instruction. Severity lowered: the line reads as documentation, not an instruction.

  • lowHides actions from the userSL102 · .github/plugins/azure-skills/skills/azure-reliability/references/iac-patching-bicep.md:178
    After patching, **the skill executes the deploys itself** — do not stop and tell the user to run commands. Confirm once with the user before each deploy, then …

    The skill asks the agent to act without the user's knowledge. Fix: Every side effect should be visible to the user. Remove the concealment instruction. Severity lowered: the line reads as documentation, not an instruction.

  • lowHides actions from the userSL102 · .github/plugins/azure-skills/skills/azure-reliability/references/iac-patching-terraform.md:109
    After patching, **the skill executes the deploys itself** — do not stop and tell the user to run commands. Confirm once with the user before each deploy, then …

    The skill asks the agent to act without the user's knowledge. Fix: Every side effect should be visible to the user. Remove the concealment instruction. Severity lowered: the line reads as documentation, not an instruction.

Files in this skill
  • SKILL.md24.3 KB
  • references/configure-health-probes.md2.1 KB
  • references/configure-multi-region.md18.5 KB
  • references/configure-storage.md5.4 KB
  • references/configure-zone-redundancy.md1.9 KB
  • references/health-probe-checks.md3.5 KB
  • references/iac-patching-bicep.md6.9 KB
  • references/iac-patching-terraform.md4.7 KB
  • references/multi-region-checks.md6.0 KB
  • references/storage-redundancy-checks.md5.1 KB
  • references/zone-redundancy-checks.md2.9 KB
  • references/services/app-service/reliability.md10.2 KB
  • references/services/functions/reliability.md6.2 KB

Questions about azure-reliability

Is azure-reliability safe to install?
Our scanner gave azure-reliability grade A (96/100): no meaningful risk found. It matched 5 rule(s); review them below before installing. Static analysis cannot prove safety, so pin the reviewed revision with a lockfile.
How do I install azure-reliability in Claude Code or Codex?
Run skillhash add github:microsoft/azure-skills/.github/plugins/azure-skills/skills/azure-reliability. It downloads the exact commit, checks the grade against your policy, writes skills.lock and installs it into .claude/skills and .agents/skills.
What happens if azure-reliability changes upstream?
Its content hash changes. skillhash verify fails in CI until you review the new version and update the lock. With a watch, you also get an alert.

More from microsoft/azure-skills