eventhouse-cli
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFE
Full Analysis
- Standard Administrative Functionality: The skill provides a set of Bash and PowerShell scripts that wrap Azure CLI (
az rest) commands to interact with Microsoft Fabric and Azure Data Explorer (Kusto). These operations (creating tables, managing policies, querying data) are the intended purpose of the skill. - Secure Command Construction: The provided scripts utilize best practices for building API request bodies. By using
jqin Bash andConvertTo-Jsonin PowerShell, the skill ensures that KQL commands—which often contain complex characters and nested JSON—are correctly escaped, reducing the risk of malformed requests or command injection into the shell or API payload. - Official Service Integration: All network operations target established Microsoft domains, specifically
api.fabric.microsoft.comfor control-plane discovery andkusto.kusto.windows.netfor data-plane operations. These are official endpoints for the services the skill is designed to manage. - Structured Mode Separation: The skill enforces a clear boundary between 'consumption' (read-only) and 'authoring' (mutating) operations. This design pattern encourages the principle of least privilege by requiring explicit mode selection before performing state-changing actions.
- Authenticated Execution: The skill relies on the user's existing
az loginsession. It does not handle, store, or exfiltrate credentials, operating entirely within the security context and permissions granted to the authenticated Azure user.
Audit Metadata