azure-postgres-ts
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFE
Full Analysis
- Security Best Practices Enforcement: The skill actively promotes secure coding practices by providing dedicated sections and code examples for:
- SSL/TLS Configuration: Explicitly instructs the use of
ssl: { rejectUnauthorized: true }, which is a critical security setting for ensuring encrypted connections and verifying server identity. - SQL Injection Prevention: Includes a 'Parameterized Queries' section that demonstrates how to safely handle user input using the
pgpackage's parameterization features, effectively mitigating SQL injection risks. - Passwordless Authentication: Provides detailed implementation guides for Microsoft Entra ID (formerly Azure Active Directory) using
@azure/identity, which reduces the reliance on long-lived static credentials. - Standard Secret Management: The instructions recommend using environment variables (e.g.,
AZURE_POSTGRESQL_PASSWORD) for sensitive data, which is a standard and recommended practice for avoiding hardcoded secrets in source code. - Trusted Resource References: All external links point to official and well-known documentation sources, including Microsoft's official Azure documentation and the repository for the widely-used
node-postgreslibrary.
Audit Metadata