{"id":"cmv1jsur1clrxad0657oqzmu9","slug":"azure-app-onboard","publicId":"43bac606-9285-419e-b0cd-88f3d742d3b1","name":"azure-app-onboard","description":"End-to-end orchestrator: from a business idea, app idea, or existing app to running Azure deployment with cost estimates and pre-deploy approval. Analyzes your app, auto-detects the right Azure services, scaffolds infrastructure code, and deploys — tailored to your app, not a template. Handles moving existing apps to Azure without rewriting or with minimal changes. WHEN: bring your app to Azure, plan my app, cost to run, is my code ready to deploy, deploy my app to the cloud, deploy all my services, what Azure services do I need, plan my Azure deployment, deploy my new app to Azure, one-click deploy, I have an app and want it on Azure, migrate my app to Azure, help me get started, build an app, no code yet, starter project. DO NOT USE FOR: use azd for deployment(use azure-deploy), optimizing existing costs (use cost-optimization), code readiness checks only (use azure-app-onboard-prereq).","version":"1.2.6","author":"Microsoft","license":"MIT","compatibility":"","status":"completed","overallGrade":"F","scannerVersion":11,"fileCount":68,"hasSkillMd":true,"hasScripts":false,"hasReferences":true,"hasEvals":false,"hasAssets":false,"sourceType":"github","sourceUrl":"https://github.com/microsoft/skills/tree/main/.github/plugins/azure-skills/skills/azure-app-onboard/","createdAt":"2026-10-09T22:39:47.629Z","completedAt":"2026-10-09T22:39:47.628Z","visibility":"public","publishedAt":"2026-08-05T23:43:43.733Z","category":"","frameworks":[],"badgeStatus":"flagged","downloadCount":0,"verdictRationale":{"summary":"Skill has warnings: 1 warning in security or structure checks.","verdict":"warn","scanners":[{"source":"vettd","weight":1,"verdict":"warn"},{"source":"cisco","weight":0.8,"verdict":"fail"}],"consensus":"fail","warnTriggers":["References external URL — review for indirect prompt injection risk"],"policyVersion":"consensus-v1","hardFailTriggers":[]},"verdictPolicyVersion":"consensus-v1","skillId":"cmsgqgpaq05o2ad07q3m06wtv","findings":[{"id":"cmv1jsur1clrzad0681hwmicv","source":"cisco","category":"security","label":"Discovery and execution chain (find -exec)","detail":"scaffold/scripts/scaffold-conformance.sh:21 — The find command with -exec executes commands on discovered files. An attacker can use this to find and execute hidden malicious scripts.","severity":"critical","ruleId":"COMPOUND_FIND_EXEC","owaspLlmCategory":null,"intent":null,"chainId":null,"fingerprint":"6639b707a63465740583e8920aa6da7f","filepath":"scaffold/scripts/scaffold-conformance.sh"},{"id":"cmv1jsur1clryad06rd0um2bu","source":"vettd","category":"security","label":"References external URL — review for indirect prompt injection risk","detail":"External URL(s) detected in references/handoff-protocol.md — referenced content can change after audit","severity":"medium","ruleId":"VTD-0088","owaspLlmCategory":null,"intent":null,"chainId":null,"fingerprint":"3dcfddf1e8bda76e8221d8d806cf3b4e","filepath":"references/handoff-protocol.md"}],"scannerRuns":[{"source":"cisco","status":"success","verdict":null,"grade":"F","findingCount":1,"criticalCount":1,"highCount":1},{"source":"vettd","status":"success","verdict":null,"grade":"B","findingCount":1,"criticalCount":0,"highCount":0}],"user":{"name":"Justin Pacella","image":"https://avatars.githubusercontent.com/u/97124458?v=4"},"repository":{"owner":"microsoft","name":"skills"},"freshness":{"status":"verified_unchanged","reason":null,"retryable":false,"renamedTo":null,"lastCheckedAt":"2026-10-21T15:41:40.984Z","lastVerifiedAt":"2026-10-21T15:41:40.984Z","lastChangeDetectedAt":"2026-10-10T16:24:47.098Z","scannedHash":"ce62e3df0d860115631b3fb7658eb7a6c35cf141","latestUpstreamHash":"ce62e3df0d860115631b3fb7658eb7a6c35cf141","nextCheckDueAt":"2026-10-22T14:54:44.189Z"},"signalCategories":[{"category":"safety","label":"Safety","form":"graded","verdict":null,"rows":[]},{"category":"reliability","label":"Reliability & Quality","form":"graded","verdict":null,"rows":[]},{"category":"performance","label":"Performance","form":"measured","verdict":{"form":"measured","magnitudes":[{"ruleId":"performance/static-context-tokens","label":"Static context tokens","value":1436,"unit":null,"method":"tiktoken/cl100k_base/skill-md-body"}]},"rows":[{"origin":"signal","id":"cmv1jsuujcls6ad06sfhrbg67","subjectType":"skill_audit","subjectId":"cmv1jsur1clrxad0657oqzmu9","relatedType":"","relatedId":"","dataCategory":"performance","sourceClass":"scan","source":"vettd","ruleId":"performance/static-context-tokens","severity":null,"label":"Static context tokens","detail":null,"valueNum":1436,"valueText":null,"unit":null,"method":"tiktoken/cl100k_base/skill-md-body","derivation":null,"confidence":null,"sampleSize":null,"synthetic":false,"firstParty":true,"observedAt":"2026-10-09T22:39:45.000Z","payload":null},{"origin":"signal","id":"cmv1jsux7clt0ad06nc2putvj","subjectType":"skill_audit","subjectId":"cmv1jsur1clrxad0657oqzmu9","relatedType":"","relatedId":"","dataCategory":"performance","sourceClass":"scan","source":"vettd","ruleId":"performance/progressive-disclosure","severity":null,"label":"Progressive disclosure","detail":null,"valueNum":null,"valueText":"present","unit":null,"method":null,"derivation":"read","confidence":null,"sampleSize":null,"synthetic":false,"firstParty":true,"observedAt":"2026-10-09T22:39:45.000Z","payload":null}]},{"category":"cost","label":"Cost","form":"measured","verdict":null,"rows":[]},{"category":"compatibility","label":"Compatibility","form":"unjudged","verdict":{"form":"unjudged"},"rows":[{"origin":"signal","id":"cmv1jsuuqcls8ad06tk8xy05b","subjectType":"skill_audit","subjectId":"cmv1jsur1clrxad0657oqzmu9","relatedType":"","relatedId":"","dataCategory":"compatibility","sourceClass":"scan","source":"vettd","ruleId":"compatibility/declared-environment-assumptions","severity":null,"label":"Declared environment assumptions","detail":null,"valueNum":null,"valueText":"","unit":null,"method":null,"derivation":"read","confidence":null,"sampleSize":null,"synthetic":false,"firstParty":true,"observedAt":"2026-10-09T22:39:45.000Z","payload":null},{"origin":"signal","id":"cmv1jsuvrclskad0617dn1zz0","subjectType":"skill_audit","subjectId":"cmv1jsur1clrxad0657oqzmu9","relatedType":"","relatedId":"","dataCategory":"compatibility","sourceClass":"scan","source":"vettd","ruleId":"compatibility/declared-name","severity":null,"label":"Declared skill name","detail":null,"valueNum":null,"valueText":"azure-app-onboard","unit":null,"method":null,"derivation":"read","confidence":null,"sampleSize":null,"synthetic":false,"firstParty":true,"observedAt":"2026-10-09T22:39:45.000Z","payload":null}]},{"category":"sentiment","label":"Popularity","form":"unjudged","verdict":null,"rows":[]},{"category":"characteristics","label":"Characteristics","form":"unjudged","verdict":null,"rows":[]}],"signalCount":25,"publisherSupplied":["name","description","author","version","license"]}