azure-cosmos-ts
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFE
Full Analysis
- Verified Vendor Content: The skill is authored by Microsoft and references official Azure SDKs and services.
- Secure Authentication Guidance: The instructions prioritize the use of DefaultAzureCredential and Entra ID tokens, which avoid the risks associated with static API keys.
- Injection Mitigation: The skill explicitly recommends and demonstrates parameterized queries using SqlQuerySpec, a primary defense against query injection attacks.
- Safe Data Handling (Category 8): The skill handles data from Cosmos DB via methods like read() and query() in SKILL.md. It addresses potential injection risks by emphasizing parameterized SQL queries (SqlParameter), using typed interfaces for boundary markers, and restricting operations to standard database capabilities within the SDK scope. Sanitization is achieved through built-in SDK parameterization features.
Audit Metadata