optimizing-ef-core-queries
Pass
Audited by Gen Agent Trust Hub on Mar 10, 2026
Risk Level: SAFE
Full Analysis
- SQL Injection Prevention: The skill includes guidance on executing raw SQL and specifically recommends using
FromSqlInterpolatedinstead ofFromSqlRaw. This is an important security consideration, as interpolated strings in this context are treated as parameters by the ORM, effectively preventing SQL injection attacks.- Sensitive Data Logging: The workflow describes the use ofEnableSensitiveDataLogging()to assist with debugging. The skill includes a clear warning that this feature should only be enabled in development environments, which serves as a safeguard against the accidental exposure of user data or secrets in production logs.- Safe Dependency Patterns: The skill references standard Microsoft Entity Framework Core libraries and practices. These references are consistent with well-known development patterns for the .NET ecosystem and do not involve untrusted third-party scripts or remote code execution.
Audit Metadata