azure-cosmos-db-py
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill incorporates helper files and documentation sourced from the microsoft/skills repository. This is an official repository from a well-known, trusted organization, and the content is managed according to standard licensing practices.
- [CREDENTIALS_UNSAFE]: The skill contains a hardcoded authentication key in references/client-setup.md. However, this is the well-known, publicly documented key used specifically for the Azure Cosmos DB Emulator in local development environments. The documentation correctly identifies this key's purpose and explicitly directs users to use DefaultAzureCredential (RBAC) without secrets for production Azure deployments.
- [COMMAND_EXECUTION]: Python templates within the skill use starlette.concurrency.run_in_threadpool to execute synchronous SDK operations. This is a standard architectural pattern for integrating synchronous libraries into asynchronous FastAPI applications to prevent event loop blocking and does not introduce security risks.
- [PROMPT_INJECTION]: The skill provides defensive coding patterns against injection attacks by requiring the use of parameterized SQL queries and mandatory partition key validation before executing database operations.
Audit Metadata