azure-kubernetes

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.80). The skill's VPA reference (references/azure-aks-vpa.md) explicitly instructs running "kubectl apply -f https://github.com/kubernetes/autoscaler/releases/latest/download/vertical-pod-autoscaler.yaml", which fetches and applies a public GitHub-hosted manifest (untrusted third-party content) that the agent is expected to read/act on and could materially change tool behavior.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.70). The skill includes a runtime instruction to install VPA via "kubectl apply -f https://github.com/kubernetes/autoscaler/releases/latest/download/vertical-pod-autoscaler.yaml", which fetches and applies remote YAML (executing remote code) as a required dependency for the VPA workflow.