azure-cosmos-ts
Pass
Audited by Gen Agent Trust Hub on Nov 4, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides comprehensive documentation and code examples for using official Microsoft Azure SDKs. The content is educational and aligns with standard software development practices.
- [EXTERNAL_DOWNLOADS]: The skill references official Microsoft packages (@azure/cosmos and @azure/identity) from the public npm registry. These are well-known libraries from a trusted vendor.
- [INDIRECT_PROMPT_INJECTION]: The skill interacts with database items, which is a potential surface for indirect injection. However, it explicitly mitigates this by providing examples of parameterized queries (
SqlQuerySpec) and recommending them as a best practice to prevent injection attacks. - [DATA_EXPOSURE_AND_EXFILTRATION]: Configuration is managed via standard environment variables (
COSMOS_KEY,COSMOS_ENDPOINT). The skill correctly advises usingDefaultAzureCredentialfor identity-based access over static keys, which is a security best practice for cloud environments.
Audit Metadata