eventhouse-cli

Pass

Audited by Gen Agent Trust Hub on Sep 11, 2026

Risk Level: SAFE
Full Analysis
  • Standard Administrative Functionality: The skill provides a set of Bash and PowerShell scripts that wrap Azure CLI (az rest) commands to interact with Microsoft Fabric and Azure Data Explorer (Kusto). These operations (creating tables, managing policies, querying data) are the intended purpose of the skill.
  • Secure Command Construction: The provided scripts utilize best practices for building API request bodies. By using jq in Bash and ConvertTo-Json in PowerShell, the skill ensures that KQL commands—which often contain complex characters and nested JSON—are correctly escaped, reducing the risk of malformed requests or command injection into the shell or API payload.
  • Official Service Integration: All network operations target established Microsoft domains, specifically api.fabric.microsoft.com for control-plane discovery and kusto.kusto.windows.net for data-plane operations. These are official endpoints for the services the skill is designed to manage.
  • Structured Mode Separation: The skill enforces a clear boundary between 'consumption' (read-only) and 'authoring' (mutating) operations. This design pattern encourages the principle of least privilege by requiring explicit mode selection before performing state-changing actions.
  • Authenticated Execution: The skill relies on the user's existing az login session. It does not handle, store, or exfiltrate credentials, operating entirely within the security context and permissions granted to the authenticated Azure user.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 11, 2026, 01:43 PM
Security Audit — agent-trust-hub — eventhouse-cli