azure-cosmos-ts
Warn
Audited by Socket on Mar 1, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
BENIGN: The content is a legitimate documentation/example for using the Azure Cosmos DB data-plane SDK. It shows conventional, industry-standard patterns for authentication, configuration, and data operations. While it exposes credentials via environment variables (COSMOS_ENDPOINT, COSMOS_KEY, or COSMOS_CONNECTION_STRING), this is expected in cloud SDK usage and not inherently malicious. No suspicious data flows, no external download/execution patterns, and no credential harvesting or exfiltration mechanisms are observed. Recommend ensuring sensitive env vars are protected (e.g., not logged, access-controlled) and following least-privilege practices when provisioning credentials.
Confidence: 75%Severity: 75%
Audit Metadata