aks-cost-optimization
Pass
Audited by Gen Agent Trust Hub on Oct 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- Administrative Tool Usage: The skill utilizes standard command-line tools including
az,kubectl, andhelmto perform cluster diagnostics and optimizations. This is consistent with the skill's purpose for managing Azure Kubernetes Service environments. - Mutation Safety Controls: The skill contains instructions for performing impactful cluster changes, such as enabling Node Auto-Provisioning or modifying node pool configurations. These operations are protected by explicit instructions requiring user approval before execution, which serves as a critical human-in-the-loop safety measure.
- Command Interpolation Surface: The skill uses placeholders like
<cluster-name>and<POOL>within shell commands. This represents a potential surface for indirect prompt injection or command injection if the underlying execution platform does not properly sanitize these inputs. However, within the context of an administrative tool authored by Microsoft, this is a standard pattern for CLI automation.
Audit Metadata