connect-from-python
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFE
Full Analysis
- [Safe Secret Management]: The skill demonstrates best practices by instructing the user to read server, database, and credential information from environment variables or a secret store rather than hardcoding them in source code.
- [SQL Injection Mitigation]: The instructions explicitly warn against using string formatting to build SQL queries, instead recommending the use of bind parameters to protect against SQL injection attacks.
- [Driver Installation Guidance]: The skill provides detailed steps for installing official Microsoft drivers and libraries (mssql-python, pyodbc). It correctly handles distribution-specific requirements, such as handling the EULA prompt and specific package manager flags for Alpine Linux, while referencing official Microsoft documentation.
- [Verification Commands]: Benign shell commands are provided for verifying driver installation and connection status. These snippets are standard diagnostic tools for developers and are consistent with the skill's intended use-case.
Audit Metadata