azure-aks
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONMETADATA_POISONINGEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill manages Azure Kubernetes Service clusters using user-provided parameters (such as resource group names, cluster names, and node pool configurations) and executes them via
az,kubectl, andhelmcommands. This creates a surface where malicious input could potentially influence infrastructure operations if the agent does not properly validate parameters. - Ingestion points: User-supplied values for cluster configuration and management commands in
SKILL.md. - Boundary markers: None identified.
- Capability inventory: Subprocess calls for
az,kubectl, andhelmare described throughout the documentation. - Sanitization: No explicit sanitization or parameter validation logic is provided within the instructions.
- [METADATA_POISONING]: The skill includes metadata and prose with dates and events set in the future (e.g.,
date_added: '2026-09-20'and claims of project retirement in 2026). Additionally, the YAML frontmatter includes arisk: criticallabel which contradicts the observed functional behavior and standard usage patterns of the documented tools. - [EXTERNAL_DOWNLOADS]: Fetches Helm charts and repository information from well-known community sources, including the Kubernetes project and Prometheus community GitHub pages. It also utilizes the
az aks install-clicommand to download management tooling. - [COMMAND_EXECUTION]: Employs Azure CLI (
az),kubectl, andhelmto perform cluster management and deployment tasks.
Audit Metadata