azuresql-db-local-to-cloud
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFE
Full Analysis
- Standard Database Connectivity Patterns: The skill demonstrates how to use environment variables (
SQL_CONNECTION_STRING) to manage connection details, which is a recommended practice for separating configuration from code. - Vendor-Specific Infrastructure: The container image registry (
sqldbpreview-dpgaeqhmgphzd4bk.azurecr.io) and documentation links (aka.ms,learn.microsoft.com) are hosted on infrastructure owned by the vendor, aligning with trusted source guidelines. - Secure Authentication Guidance: The skill appropriately recommends transitioning from SQL authentication (SA password) used in local development to Microsoft Entra ID (Managed Identity) for cloud deployments, enhancing security by avoiding hardcoded credentials in production environments.
- Safe SQL Practices: The provided code examples for Node.js, .NET, and Python use parameterized queries, which is the standard defense against SQL injection vulnerabilities.
Audit Metadata