azure-cosmos-java
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFE
Full Analysis
- Standard Security Practices: The skill encourages the use of System.getenv() for managing sensitive credentials like API keys, preventing hardcoding of secrets.
- Injection Prevention: In the examples, it specifically highlights the use of parameterized queries (SqlQuerySpec with SqlParameter) as a recommended method to prevent SQL injection in NoSQL queries.
- Trusted Infrastructure: All referenced dependencies (com.azure) and URLs (e.g., microsoft.com, azure.com, sonatype.com) are official, well-known resources associated with the vendor and standard software distribution.
- Secure Authentication Options: The skill includes an example of using DefaultAzureCredential, which enables secure, identity-based authentication (Azure AD/Managed Identities) without managing static long-lived credentials.
Audit Metadata