connect-from-typescript-and-node
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFE
Full Analysis
- Parameterized Queries for SQL Injection Prevention: The skill explicitly instructs users to use
request.input()for all query parameters. It correctly identifies that concatenating strings into SQL text is a primary vector for SQL injection and provides the secure alternative. - Secure Credential Management: The provided examples demonstrate using environment variables (
process.env) and Microsoft Entra ID for authentication. This approach avoids hardcoding sensitive credentials in source code, following industry best practices for secret management. - Encrypted Communication: The configuration instructions emphasize setting
encrypt: trueandtrustServerCertificate: false, ensuring that data transmitted between the application and the database is encrypted and the server's identity is verified. - Standard Dependency Usage: The skill utilizes well-known, community-standard packages (
mssql,tedious) and points to official documentation, ensuring that developers are using established and reviewed libraries.
Audit Metadata