azure-diagnostics
Pass
Audited by Gen Agent Trust Hub on Apr 30, 2026
Risk Level: SAFE
Full Analysis
- Log and Telemetry Analysis: The skill facilitates the retrieval and analysis of application logs and traces via
kubectl logsandaz monitorcommands. This represents a potential surface for indirect prompt injection where malicious content in logs could attempt to influence the agent's behavior. - Access to Resource Configuration: Diagnostic workflows include commands to retrieve environment variables, instrumentation keys, and connection strings (e.g.,
az functionapp config appsettings list). This access is necessary for troubleshooting service connectivity and configuration mismatches. - Privileged Cluster Operations: The AKS troubleshooting guides include instructions for node debugging and resource remediation (e.g.,
kubectl debug node). The skill explicitly flags these as privileged, non-read-only actions and provides appropriate warnings to the user. - Official Resource Integration: All external links and package references target official Microsoft documentation (
learn.microsoft.com), Microsoft-maintained GitHub repositories, and official container registries (mcr.microsoft.com), ensuring a verified chain of information.
Audit Metadata