azure-aks
Pass
Audited by Gen Agent Trust Hub on Mar 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions for infrastructure management using
az(Azure CLI),kubectl, andhelm. This includes cluster setup, credential retrieval (az aks get-credentials), and high-privilege role assignments (az role assignment create). - [EXTERNAL_DOWNLOADS]: The skill configures external software sources by adding the official NGINX Ingress Helm repository (
https://kubernetes.github.io/ingress-nginx) and installing the official Microsoft Flux extension for GitOps. - [PROMPT_INJECTION]: The skill enables a GitOps workflow via Flux, which creates a surface for indirect instructions through external manifest ingestion.
- Ingestion points: The
az k8s-configuration flux createcommand inSKILL.mddesignates a Git repository (--url https://github.com/myorg/myrepo) as the source for cluster configuration. - Boundary markers: None present in the instructions.
- Capability inventory: The skill includes administrative control over the AKS cluster via
az,kubectl, andhelm(all found inSKILL.md). - Sanitization: None present; the skill assumes user control over the target Git repository.
Audit Metadata