azure-kubernetes
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFE
Full Analysis
- Configuration Ingestion Surface: The skill processes user-provided Kubernetes manifests and Helm charts to determine compatibility with AKS Automatic. This manifest evaluation includes security considerations regarding potential indirect prompt injection, which the skill mitigates by requiring explicit user approval before applying any generated fixes.
- Trusted Resource References: The skill utilizes configuration manifests for components like the Gateway API, sourced from the official and well-known Kubernetes SIGs repository. These external references are restricted to established infrastructure providers and are intended to ensure environmental readiness.
- Credential Management Standards: Security is enhanced by the skill's instruction to use Microsoft Entra ID and Workload Identity (OIDC) instead of static secrets. This methodology leverages managed identities to provide passwordless authentication to Azure services, reducing the risk of credential exposure.
- Hardened Deployment Templates: The provided templates for Dockerfiles and Kubernetes manifests incorporate standard security hardening measures, such as read-only root filesystems and non-root users. These configurations are designed to comply with Azure's Deployment Safeguards and standard pod security policies.
Audit Metadata