azure-aks-edge-essentials
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to fetch and process external documentation, which creates a potential surface for indirect prompt injection if the remote content were to be compromised.
- Ingestion points: Remote technical documentation is retrieved from learn.microsoft.com via the
microsoft_docs_fetchorfetch_webpagetools. - Boundary markers: The skill does not specify the use of clear delimiters or guardrail instructions to isolate the fetched content from the agent's core instructions.
- Capability inventory: The agent is instructed to use
read_filefor local navigation and network-enabled tools to fetch markdown from external URLs. - Sanitization: There are no explicit instructions to sanitize, filter, or validate the structure of the retrieved markdown before processing.
- [EXTERNAL_DOWNLOADS]: The skill fetches content from well-known Microsoft domains and refers users to official repositories.
- Fetches documentation from learn.microsoft.com to provide the agent with current technical specifications and troubleshooting steps.
- Provides a reference to the official MicrosoftDocs GitHub repository (github.com/MicrosoftDocs/mcp) for tool installation instructions.
Audit Metadata