Scanned skills

azurecosmosdb/cosmosdb-agent-kit cosmosdb-best-practices

Checked the catalogued skill at cosmosdb-best-practices.

SkillTrust corpus scan 4 November 2026 v0.13.0 via skillsh Verify on GitHub
F AI-triaged 26
C Security

C; retained sample includes a medium finding · SD-008 · what this rule accepts as a false positive →

F Permissions

F; retained sample includes a critical finding · SD-006 · what this rule accepts as a false positive →

B Transparency

B; retained sample includes a medium finding · SD-007 · what this rule accepts as a false positive →

showing 10 of 26
transparencymedium SD-007
metadata.json
transparencymedium SD-007
metadata.json
permission_hygienehigh SD-003
rules/model-nesting-depth.md
securitymedium SD-008
rules/monitoring-azure-monitor.md
permission_hygienehigh SD-003
rules/monitoring-azure-monitor.md
permission_hygienehigh SD-003
rules/monitoring-throttling.md
permission_hygienecritical SD-006
rules/query-pagination.md
permission_hygienecritical SD-006
rules/query-pagination.md
securitymedium SD-008
rules/sdk-emulator-ssl.md
securitymedium SD-008
rules/sdk-emulator-ssl.md
3 suppressed by AI triage
permission_hygienehigh SD-003 benign_example
rules/model-nesting-depth.md

No actual path traversal strings are present in the file content, indicating a false positive.

permission_hygienecritical SD-006 benign_example
rules/pattern-change-feed-materialized-views.md

No hardcoded secret or API key present; code uses normal variables and UpsertItemAsync call.

securitymedium SD-008 benign_example
rules/sdk-java-spring-boot-versions.md

The flagged text appears in a documentation file, not executable code, indicating a false positive.