azure-cosmos-db-py
Pass
Audited by Gen Agent Trust Hub on Mar 21, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill utilizes official, well-known libraries from a trusted organization (Microsoft), specifically
azure-cosmosandazure-identity, for database operations and authentication. - [SAFE]: It promotes secure authentication practices by recommending the use of
DefaultAzureCredentialfor production environments, which leverages Azure's Managed Identities and Role-Based Access Control (RBAC) to avoid the use of static credentials. - [SAFE]: The documentation includes explicit security requirements to use parameterized queries with the
@parametersyntax, which is the standard defense against injection vulnerabilities in NoSQL databases. - [SAFE]: The architecture follows a clean separation of concerns, isolating the database client configuration and using Pydantic models for strict data validation, which reduces the risk of data corruption or schema-based attacks.
Audit Metadata