The Agent Skills Directory

Least-Privilege Database Access: The skill provides templates for creating specific database users with limited roles (db_datareader, db_datawriter) instead of using the administrative sa account. This practice reduces the potential blast radius should the application identity be compromised.
Secure Secret Management: The skill emphasizes storing connection strings and passwords in environment variables, git-ignored .env files, or dedicated secret managers like dotnet user-secrets and Azure Key Vault. This prevents sensitive credentials from being inadvertently committed to source control.
Environment-Specific Security Configuration: The guidance distinguishes between local development and production environments, specifically advising that TrustServerCertificate=true should only be used for local self-signed certificates and never in cloud environments, ensuring proper TLS certificate validation in production.
Modern Authentication Adoption: The skill recommends using Microsoft Entra managed identities for cloud deployments. This transition from password-based authentication to token-based identity management is a significant security improvement that eliminates the need to manage and rotate database passwords.

azuresql-db-auth