azure-cosmos-rust
Pass
Audited by Gen Agent Trust Hub on May 27, 2026
Risk Level: SAFE
Full Analysis
- [Dependency Integrity]: The skill includes an important security advisory regarding package selection. It explicitly instructs users to use the official
azure_data_cosmoscrate and warns against unofficial community variants, which helps protect against potential typosquatting or supply chain risks. - [Credential Management]: The instructions promote secure development practices by advising against hardcoded credentials. It recommends using
DeveloperToolsCredentialfor local environments andManagedIdentityCredentialfor production, aligning with the principle of least privilege. - [Data Handling]: While the skill involves processing external data from a database, it uses strongly-typed models through
serde, which is a standard and robust approach for handling structured data in Rust. - [Environment Configuration]: The use of environment variables for the database endpoint (
COSMOS_ENDPOINT) is a standard practice and is implemented using safe placeholders.
Audit Metadata