azure-servicebus-ts
Pass
Audited by Gen Agent Trust Hub on Aug 9, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill uses official Azure SDK packages for TypeScript, which are well-known and trusted for enterprise messaging.
- [SAFE]: Authentication is implemented using
DefaultAzureCredential, a best practice that avoids hardcoding secrets and relies on environment-specific identity providers. - [SAFE]: Environment variables are documented with clear placeholders, encouraging secure configuration management rather than hardcoding sensitive information.
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install standard packages from the official NPM registry, which is the expected behavior for TypeScript development.
- [DATA_EXPOSURE_AND_EXFILTRATION]: No patterns of sensitive data harvesting or unauthorized network transmission were detected. All network communication is directed to official Azure Service Bus endpoints defined by the user.
- [INDIRECT_PROMPT_INJECTION]: The skill acts as a messaging client that ingests data from external queues and topics. While this represents a data ingestion surface, it is the primary functional purpose of the tool and does not inherently lead to exploitation without further unsafe processing of that data.
Audit Metadata