azuresql-db-container

Fail

Audited by Snyk on Jul 8, 2026

Risk Level: HIGH
Full Analysis

HIGH W007: Insecure credential handling detected in skill instructions.

  • Insecure credential handling detected (high risk: 1.00). The skill embeds an example password ("YourStr0ng_Passw0rd") verbatim in docker/env and sqlcmd commands, which would require the LLM to output secret values directly if it reproduces those commands.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

  • Potentially malicious external URL detected (high risk: 0.90). The skill pulls and runs a remote container image sqldbpreview-dpgaeqhmgphzd4bk.azurecr.io/azure-sql/db-dev:latest at runtime (docker pull/run), which downloads and executes remote code that the skill requires to function.

Issues (2)

W007
HIGH

Insecure credential handling detected in skill instructions.

W012
MEDIUM

Unverifiable external dependency detected (runtime URL that controls agent).

Audit Metadata
Risk Level
HIGH
Analyzed
Jul 8, 2026, 04:22 AM
Issues
2
Security Audit — snyk — azuresql-db-container