aspire-monitoring
Pass
Audited by Gen Agent Trust Hub on Nov 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [Indirect Prompt Injection Surface]: This skill presents a surface for indirect prompt injection because it reads untrusted data from container logs and telemetry streams using commands like
aspire logsandaspire otel logs(seeSKILL.md). The skill recommends using structured JSON formatting which provides some boundary separation, but does not explicitly instruct the agent to ignore embedded instructions within log content. The capability inventory for the agent includes executing diagnostic commands via theaspire,kubectl, andazCLI tools. No specific sanitization methods for ingested log content are described. - [Asynchronous Tool Execution]: The skill includes guidance for running background daemons like the Aspire Dashboard. it instructs agents to use asynchronous execution modes to ensure process persistence without blocking the primary workflow, which is a standard operational practice for long-running monitoring tasks.
- [Context-Aware Tool Routing]: The skill defines a diagnostics bridge to ensure the agent uses environment-specific tools, such as
kubectlfor AKS andazure-diagnosticsfor Azure services. This promotes the principle of least privilege by scope-limiting tool use to the appropriate diagnostic context.
Audit Metadata