eventhouse-consumption-cli
Pass
Audited by Gen Agent Trust Hub on Jul 10, 2026
Risk Level: SAFE
Full Analysis
- [Network Operations]: The skill uses
az restto communicate with official Microsoft services, specificallyhttps://api.fabric.microsoft.comfor workspace discovery andhttps://kusto.kusto.windows.netfor KQL query execution. These are established, trusted endpoints. - [File System Operations]: To handle complex Kusto Query Language (KQL) syntax which often includes pipe characters, the skill recommends writing JSON payloads to temporary files (e.g.,
/tmp/kql_body.json). This is a recommended best practice for CLI tools to avoid shell escaping issues and potential command injection. - [Authentication and Authorization]: The skill relies on standard Azure CLI authentication (
az login). It follows the principle of least privilege by focusing on read-only KQL queries and directing users to specific roles (like 'viewer') for troubleshooting access issues. - [Information Discovery]: The skill includes comprehensive KQL queries for schema discovery, such as listing tables, columns, and stored functions. These are used within the intended scope of data exploration and monitoring.
Audit Metadata