azure-aks-edge-essentials

Pass

Audited by Gen Agent Trust Hub on Oct 7, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to fetch and process external documentation, which creates a potential surface for indirect prompt injection if the remote content were to be compromised.
  • Ingestion points: Remote technical documentation is retrieved from learn.microsoft.com via the microsoft_docs_fetch or fetch_webpage tools.
  • Boundary markers: The skill does not specify the use of clear delimiters or guardrail instructions to isolate the fetched content from the agent's core instructions.
  • Capability inventory: The agent is instructed to use read_file for local navigation and network-enabled tools to fetch markdown from external URLs.
  • Sanitization: There are no explicit instructions to sanitize, filter, or validate the structure of the retrieved markdown before processing.
  • [EXTERNAL_DOWNLOADS]: The skill fetches content from well-known Microsoft domains and refers users to official repositories.
  • Fetches documentation from learn.microsoft.com to provide the agent with current technical specifications and troubleshooting steps.
  • Provides a reference to the official MicrosoftDocs GitHub repository (github.com/MicrosoftDocs/mcp) for tool installation instructions.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 7, 2026, 12:23 AM