diagnose-connection-errors
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- Command Execution: The skill includes commands for
sqlcmdand the Azure CLI (az) to diagnose database connectivity issues, manage firewall rules, and query server properties. These are standard administrative tools used within the intended scope of Azure SQL Database management and are associated with the skill's authoring organization. - Credential Management: Instructions demonstrate the use of environment variables (e.g.,
$SQL_PASSWORD) for database authentication. This is an established security practice to avoid hardcoding secrets directly in command history or scripts. - Trusted External References: The skill references official Microsoft Learn documentation and utilizes domains associated with the vendor (e.g.,
microsoft.com,go.microsoft.com). These references are used neutrally to provide informational context and verbatim error message definitions. - Indirect Prompt Injection Surface: The skill is designed to process user-provided error messages to identify specific SQL error codes for diagnosis. While this involves processing external data, the diagnostic purpose and the requirement for manual command execution by the user or agent represent a standard operational pattern with minimal security risk.
- Administrative Utilities: The skill discusses the use of
DBCC FLUSHAUTHCACHEandsqlcmdflags like-m-1. These are documented features of the SQL Server ecosystem intended for troubleshooting and are used here according to official guidance.
Audit Metadata