azure-diagnostics

Pass

Audited by Gen Agent Trust Hub on Apr 30, 2026

Risk Level: SAFE
Full Analysis
  • Log and Telemetry Analysis: The skill facilitates the retrieval and analysis of application logs and traces via kubectl logs and az monitor commands. This represents a potential surface for indirect prompt injection where malicious content in logs could attempt to influence the agent's behavior.
  • Access to Resource Configuration: Diagnostic workflows include commands to retrieve environment variables, instrumentation keys, and connection strings (e.g., az functionapp config appsettings list). This access is necessary for troubleshooting service connectivity and configuration mismatches.
  • Privileged Cluster Operations: The AKS troubleshooting guides include instructions for node debugging and resource remediation (e.g., kubectl debug node). The skill explicitly flags these as privileged, non-read-only actions and provides appropriate warnings to the user.
  • Official Resource Integration: All external links and package references target official Microsoft documentation (learn.microsoft.com), Microsoft-maintained GitHub repositories, and official container registries (mcr.microsoft.com), ensuring a verified chain of information.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 30, 2026, 10:06 PM