azuresql-db-seed

Pass

Audited by Gen Agent Trust Hub on Sep 7, 2026

Risk Level: SAFE
Full Analysis
  • Docker-based Command Execution: The skill employs docker exec to run database utilities like sqlcmd and bcp inside a container. While this involves command execution, it is the standard and necessary approach for managing containerized database environments.
  • External Dependencies from Known Registries: The provided scripts depend on well-known packages from NPM (mssql, @faker-js/faker) and PyPI (pyodbc, faker). These are standard tools for database connectivity and data generation, representing routine development practices.
  • Reference to Vendor-Owned Infrastructure: The skill instructs users to pull a container image from an Azure Container Registry (azurecr.io) and provides links to official Microsoft documentation (aka.ms). These resources originate from the vendor's own verified services.
  • Credential Usage in Documentation: The skill uses a clearly labeled placeholder password (YourStr0ng_Passw0rd) and suggests the use of environment variables for real secrets. This demonstrates a focus on teaching secure configuration practices.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 7, 2026, 10:32 AM
Security Audit — agent-trust-hub — azuresql-db-seed