azuresql-db-dab
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [External Downloads]: The skill fetches the Data API Builder CLI using standard package managers and pulls container images from official Microsoft registries. These actions are consistent with the skill's purpose and use trusted sources.
- [Credential Management]: The skill promotes secure practices by using environment variable indirection for database connection strings, preventing hardcoded credentials from being stored in configuration files.
- [Command Execution]: Standard CLI tools like docker, sqlcmd, and dab are used to configure and run the database and API services. These are expected for database administration tasks.
- [Indirect Prompt Injection Surface]: By enabling database access, the skill introduces a potential data ingestion surface via entities mapped to SQL tables like dbo.Books. The skill mitigates this by providing guidance on using restricted permissions and scoping to manage access levels, which is a standard security consideration.
Audit Metadata