azuresql-db-ci

Pass

Audited by Gen Agent Trust Hub on Aug 21, 2026

Risk Level: SAFE
Full Analysis
  • Container Registry Usage: The skill pulls an image from a private Azure Container Registry (sqldbpreview-dpgaeqhmgphzd4bk.azurecr.io). As this is an official Microsoft resource related to the Azure SQL Developer Private Preview, it represents standard vendor functionality for distributing pre-release software.
  • Docker Command Execution: Instructions include the use of docker run and docker exec to start the database service and provision the application database (appdb). These are standard operations for setting up ephemeral environments in CI pipelines.
  • Secret Management: The skill correctly demonstrates the use of GitHub Secrets (e.g., ${{ secrets.MSSQL_SA_PASSWORD }}) to handle sensitive credentials. A placeholder password (YourStr0ng_Passw0rd) is used in documentation examples, which is a common practice for illustrative scripts.
  • External Documentation Links: The skill references official Microsoft short-links (aka.ms) for signup and feedback, which are well-known and trusted domains for this vendor.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 21, 2026, 05:53 PM
Security Audit — agent-trust-hub — azuresql-db-ci