azure-storage-blob-ts
Pass
Audited by Gen Agent Trust Hub on May 14, 2026
Risk Level: SAFE
Full Analysis
- [Trusted Package Dependencies]: The skill utilizes official SDK packages including
@azure/storage-bloband@azure/identity. These are standard, well-maintained libraries from a trusted vendor for interacting with Azure cloud infrastructure. - [Secure Credential Handling]: Implementation examples consistently use environment variables (e.g.,
AZURE_STORAGE_CONNECTION_STRING) and explicit placeholders for sensitive values. The included acceptance criteria specifically highlight hardcoded credentials as a security risk to be avoided. - [Comprehensive Security Guidance]: The documentation includes dedicated sections for secure SAS token generation, recommending User Delegation SAS which uses Entra ID credentials rather than long-lived account keys. It also covers protocol restrictions (HTTPS) and IP filtering.
- [Data Interaction Surface]: As the skill is designed for blob operations, it facilitates reading data from external storage and local files. While this is the primary intended functionality, users should consider standard sanitization when processing content from untrusted external sources.
Audit Metadata