The Agent Skills Directory

[Indirect Prompt Injection Surface]: The skill processes event data from database sessions, which may include captured SQL text. This data ingestion represents a potential attack surface if the agent were to perform automated actions based on the content of the logs without proper validation.
[Administrative Command Execution]: The instructions involve creating local SQL files and executing them using the sqlcmd command-line tool. These operations are transparently documented as part of the session lifecycle management and use secure connection flags such as encrypted connections and Entra ID authentication.
[Secure Authentication Patterns]: The skill promotes secure identity management by guiding users toward Managed Identities for interacting with Azure resources, which reduces reliance on static secrets or shared access signatures.

capture-with-extended-events