azuresql-db-sidecar

Pass

Audited by Gen Agent Trust Hub on Sep 28, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONCREDENTIALS_UNSAFE
Full Analysis
  • [External Registry Reference]: The skill references a private Azure Container Registry (sqldbpreview-dpgaeqhmgphzd4bk.azurecr.io) to pull a preview database engine image. While this involves fetching external software, the skill correctly identifies it as a private preview resource and provides the official signup link for authentication.
  • [Credential Management Patterns]: The skill demonstrates the use of shell interpolation for secrets (e.g., ${MSSQL_SA_PASSWORD:?...}) in compose.yaml, which is a recognized practice for avoiding hardcoded secrets in version control. It also includes an example connection string with a placeholder password (YourStr0ng_Passw0rd) to illustrate the required syntax.
  • [Container Command Execution]: The skill utilizes sqlcmd within health checks and initialization containers to manage the database engine. These commands are executed within the context of the container environment to ensure database readiness and schema creation.
  • [Health Check Logic]: A health check is implemented using sqlcmd with the -b (abort on error) and -C (trust server certificate) flags. This is a standard operational pattern for containerized databases to ensure dependent services only start once the engine is fully initialized.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 28, 2026, 08:19 PM