postgresql-best-practices
Pass
Audited by Gen Agent Trust Hub on Aug 7, 2026
Risk Level: SAFE
Full Analysis
- [Safety Guardrails and Confirmation Loops]: The skill instructions implement explicit confirmation requirements for destructive database operations (DROP, TRUNCATE, DELETE without WHERE) and administrative Azure CLI actions. This design promotes safe operation and prevents accidental data loss.
- [Managed Service Security Boundaries]: It correctly identifies and enforces managed service limitations, specifically instructing the agent to avoid attempting OS-level access or internal configuration file modifications that are restricted on platforms like Azure Database for PostgreSQL.
- [Secure Authentication and Identity]: The skill provides clear guidance on using Microsoft Entra ID (formerly Azure AD) and Managed Identities for passwordless authentication, reducing the need for hardcoded credentials. It also handles API key configuration using placeholders rather than sensitive defaults.
- [Networking and Encryption Guidance]: Comprehensive instructions are provided for securing database traffic using SSL/TLS (including root certificate verification) and implementing network isolation via VNets and Private Endpoints.
Audit Metadata