azure-kubernetes
Pass
Audited by Gen Agent Trust Hub on Oct 28, 2026
Risk Level: SAFE
Full Analysis
- Sanitization of Cluster Data: The skill includes a dedicated
jqscript (sanitize-readiness-input.jq) designed to filter Kubernetes manifests before they are processed. This effectively prevents the exposure of sensitive fields, such as secret data or environment variable values, to the agent. - Deployment Safeguards Enforcement: The
azure-kubernetes-app-deployandazure-kubernetes-automatic-readinesscomponents evaluate configurations against a set of 13 primary safeguards (DS001-DS013). This includes enforcing resource limits, liveness/readiness probes, and non-root execution. - Trusted External Resource: The skill references a standard installation manifest for the Kubernetes Gateway API from the
kubernetes-sigsorganization on GitHub. This is a well-known and trusted source for Kubernetes-related tooling. - Secure Identity Management: The instructions heavily emphasize the use of Microsoft Entra ID and Workload Identity, providing specific code patterns and manifest templates to avoid the use of static credentials and hardcoded secrets.
Audit Metadata