cosmosdb-best-practices
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFE
Full Analysis
- Comprehensive Database Guidelines: The skill provides a robust set of 75+ rules across 11 categories to optimize Azure Cosmos DB performance. The guidance covers critical design areas like partition key selection, indexing strategies, and multi-region consistency, following established architectural standards.
- Local Development and Emulator Support: Several modules offer specific instructions for local development using the Azure Cosmos DB Emulator. This includes handling self-signed certificates and configuring connection modes appropriately for isolated testing, which helps prevent accidental interaction with production resources.
- Standard SDK Implementation: The provided code examples for .NET, Java, Python, and Node.js demonstrate standard and secure usage of the Azure Cosmos DB SDKs. Patterns such as singleton client management, parameterized queries to prevent injection, and optimistic concurrency with ETags are correctly emphasized.
- Well-Known Testing Credentials: The skill references the publicly documented, well-known master key for the Cosmos DB Emulator. This is a standard practice for developer tooling and local environments and does not constitute a security risk or credential leak.
- Monitoring and Observability: The instructions include best practices for integrating with Azure Monitor and Application Insights, encouraging developers to implement diagnostic logging and performance tracking as part of a secure and observable infrastructure.
Audit Metadata