azuresql-db-testing
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [External Container Resource]: The skill pulls a container image from a Microsoft-owned Azure Container Registry (
sqldbpreview-dpgaeqhmgphzd4bk.azurecr.io). While this involves fetching external content, the resource belongs to the skill's authoring organization and is necessary for the stated purpose of testing against the Azure SQL engine. - [Internal Command Execution]: The provided test recipes utilize shell commands (e.g.,
sqlcmd) executed within the container's environment to verify readiness and provision databases. These commands are localized to the container lifecycle and do not impact the host system's security posture. - [Code Generation Surface]: As the skill generates test fixtures based on user requirements (such as specific languages or frameworks), it possesses an indirect prompt injection surface. This is a standard consideration for skills that transform user input into executable code; following best practices for code review and sanitization is recommended.
- [Credential Management]: The skill uses placeholders and example literals (e.g.,
YourStr0ng_Passw0rd) for administrative passwords. It correctly instructs users on password complexity requirements and registry authentication without hardcoding sensitive secrets.
Audit Metadata