databricks-migration

Pass

Audited by Gen Agent Trust Hub on Jul 10, 2026

Risk Level: SAFE
Full Analysis
  • Secure Secret Management: The skill provides guidance on using notebookutils.credentials.getSecret to access Azure Key Vault. This is a recommended security pattern that ensures sensitive credentials are never hardcoded in notebook code and are instead managed through authorized platform identities.
  • Managed Library Governance: By advising the use of Fabric Environments for library management rather than ad-hoc runtime installations, the skill promotes a more stable and auditable supply chain. This practice ensures that dependencies are versioned and consistently applied across Spark sessions.
  • Controlled Resource Lifecycle: The instructions for storage mounting include explicit guidance on lifecycle management, such as using try/finally blocks to ensure resources are unmounted. This prevents unintended data exposure or resource lingering after a session concludes.
  • Validated Migration Logic: The mapping of Unity Catalog structures to Fabric Lakehouse schemas follows official vendor documentation. The identified changes—such as the transition from 3-level to 2-level namespaces—are architectural in nature and do not introduce security vulnerabilities.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 10, 2026, 02:44 PM
Security Audit — agent-trust-hub — databricks-migration