azure-cosmos-ts

Warn

Audited by Socket on Mar 1, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

BENIGN: The content is a legitimate documentation/example for using the Azure Cosmos DB data-plane SDK. It shows conventional, industry-standard patterns for authentication, configuration, and data operations. While it exposes credentials via environment variables (COSMOS_ENDPOINT, COSMOS_KEY, or COSMOS_CONNECTION_STRING), this is expected in cloud SDK usage and not inherently malicious. No suspicious data flows, no external download/execution patterns, and no credential harvesting or exfiltration mechanisms are observed. Recommend ensuring sensitive env vars are protected (e.g., not logged, access-controlled) and following least-privilege practices when provisioning credentials.

Confidence: 75%Severity: 75%
Audit Metadata
Analyzed At
Mar 1, 2026, 12:36 AM
Package URL
pkg:socket/skills-sh/claudedjale%2Fskillset%2Fazure-cosmos-ts%2F@eef034b88c051d3d8a415eb4baf2881b2bb0d927