azuresql-db-connections
Pass
Audited by Gen Agent Trust Hub on Sep 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- Command Execution: The skill provides shell commands (
docker run,docker exec,sqlcmd) to manage the local Azure SQL Database container environment. These are standard operations for provisioning and interacting with the development database. - External Resource Access: It references a private preview container image hosted on an Azure Container Registry (
azurecr.io) and documentation links onmicrosoft.comandaka.ms. These resources originate from the vendor's infrastructure and are necessary for the skill's functionality. - Example Credentials: The provided snippets use a hardcoded example password (
YourStr0ng_Passw0rd) for the local container's system administrator account. While appropriate for a development template, users should replace these with secure, environment-specific secrets in production. - Indirect Prompt Injection Surface: The skill monitors user queries for specific database-related keywords (e.g., "connection pooling", "transient fault") to trigger relevant advice. This ingestion surface is typical for documentation-style skills and follows standard interaction patterns.
Audit Metadata