azuresql-db-dab
Pass
Audited by Gen Agent Trust Hub on Jul 28, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- External Tool Installation: The skill instructs the user to install the Data API Builder (DAB) CLI via the .NET tool registry and to pull Docker images from official Microsoft and Azure container registries. These actions facilitate the setup of the development environment using verified first-party tools.
- Command-Line Operations: Various CLI commands for docker, dotnet, and dab are used to initialize configuration and manage the local API server. These operations are standard for the intended workflow of building and testing database-backed APIs.
- Environment Variable Usage: The skill encourages the use of the @env() indirection within configuration files to reference connection strings stored in environment variables. This practice helps prevent the accidental exposure of database credentials in static files.
- Access Control Guidance: The instructions include steps for configuring API permissions, with specific recommendations to use restrictive roles for non-local environments, ensuring that unauthenticated access is limited to safe development scenarios.
Audit Metadata