azure-cosmos-db-assistant@1.0.0
CAUTIONPublisher claims: "Expert assistant for Azure Cosmos DB — data modeling, query optimization, performance tuning, and best practices." Observed in sandbox: no network, touches nothing outside the project, writes no memory.
Registry Claude Code plugin marketplacePublisher azurecosmosdb · joined 0 days agoInstalls 0Last detonated 3 h ago
Is [email protected] safe to install?
KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario) on 2026-10-26 and scored it 68/100 (Caution). It is not known to be malicious, but it has behaviour or code a security policy should decide on before install. Notable findings: Access to sensitive file paths; Rule modification attempt; HTML comment carrying imperative instructions to the agent. Summary: no network, touches nothing outside the project, writes no memory.
Behavior trace
Honeypot run · 0 s · 1 scenarios · 0 deviationst+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only
Static findings
HIGH
Access to sensitive file pathsskills/cosmosdb-best-practices/rules/sdk-local-dev-config.md:35 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05CRITICAL
Rule modification attemptskills/cosmosdb-best-practices/rules/model-json-serialization.md:62 · Rule modification attempt — overwriting existing instructions
AST01CRITICAL
HTML comment carrying imperative instructions to the agentskills/cosmosdb-best-practices/rules/sdk-newtonsoft-dependency.md:18 · HTML comment carrying imperative instructions to the agent
AST01CRITICAL
Rule modification attemptskills/cosmosdb-best-practices/rules/model-json-serialization.md:128 · Rule modification attempt — overwriting existing instructions
AST01CRITICAL
Rule modification attemptskills/cosmosdb-best-practices/rules/model-json-serialization.md:81 · Rule modification attempt — overwriting existing instructions
AST01HIGH
Access to sensitive file pathsskills/cosmosdb-best-practices/rules/sdk-local-dev-config.md:15 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05CRITICAL
Rule modification attemptskills/cosmosdb-best-practices/rules/model-json-serialization.md:111 · Rule modification attempt — overwriting existing instructions
AST01MEDIUM
File type combined with upload actioncommands/cosmos-setup.md:20 · File type combined with upload action — agent may exfiltrate local data files
AST07HIGH
Access to sensitive file pathsskills/cosmosdb-best-practices/rules/sdk-local-dev-config.md:167 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05HIGH
Access to sensitive file pathsskills/cosmosdb-best-practices/rules/sdk-local-dev-config.md:36 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05HIGH
Access to sensitive file pathsskills/cosmosdb-best-practices/rules/sdk-local-dev-config.md:134 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05