synapse-migration
Pass
Audited by Gen Agent Trust Hub on Jul 10, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- Standard Command Execution: The migration orchestration scripts utilize the Azure CLI (
az) through Python'ssubprocessmodule. This is used to programmatically acquire authentication tokens and interact with Azure resources, which is an expected and standard practice for migration automation tools. - Trusted API Communication: The skill performs network operations using the
requestslibrary to communicate with established Microsoft API endpoints, includingmanagement.azure.comfor resource management andapi.fabric.microsoft.comfor Fabric operations. These communications are essential for the migration process and target trusted service domains. - Secure Credential Handling: The skill avoids hardcoding sensitive information, instead using clear placeholders for tenant and workspace identifiers. It provides established patterns for retrieving secrets from Azure Key Vault, ensuring that credentials are managed securely throughout the migration lifecycle.
- Dependency Verification: The documentation includes detailed compatibility checks for Python and Java libraries. It identifies version gaps between Synapse and Fabric runtimes and provides remediation steps for installing standard, verified packages from official registries like PyPI.
- Validation Framework: A robust suite of validation scripts is included to verify data integrity (row counts and checksums) and compute environment readiness post-migration, ensuring a reliable transition without introducing unexpected code behaviors.
Audit Metadata