azure-kubernetes-app-deploy
Pass
Audited by Gen Agent Trust Hub on Aug 12, 2026
Risk Level: SAFE
Full Analysis
- [Kubernetes Deployment Safeguards]: The skill generates manifests that comply with AKS Deployment Safeguards (DS001–DS013), including resource limits, non-root user execution, and read-only root filesystems.
- [Azure Workload Identity Integration]: The skill promotes the use of Azure Workload Identity for authenticating to Azure services like Key Vault and PostgreSQL, which avoids the need for hardcoded credentials or long-lived secrets.
- [Trusted External Resource Usage]: The skill fetches Kubernetes Gateway API CRDs from the official
kubernetes-sigsGitHub repository and uses container base images from trusted registries like Microsoft Container Registry (MCR) and Google Container Registry (GCR). - [Standard Dependency Management]: Framework-specific knowledge packs provide instructions for using standard, well-known package managers (npm, pip, dotnet, maven, gradle) to handle application dependencies.
- [Safe Workflow Automation]: The deployment workflow uses standard CLI tools (
az,kubectl) to interact with Azure and Kubernetes environments in a controlled manner.
Audit Metadata