Skip to main content

azure-eventhub-ts

Facilitates high-throughput event streaming and real-time analytics using Azure Event Hubs SDK for JavaScript.

Install this skill

or
42/100

Security score

The azure-eventhub-ts skill was audited on Feb 21, 2026 and we found 14 security issues across 3 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 87

Template literal with variable interpolation in command context

SourceSKILL.md
87console.log(`Partition: ${context.partitionId}, Body: ${JSON.stringify(event.body)}`);
medium line 91

Template literal with variable interpolation in command context

SourceSKILL.md
91console.error(`Error on partition ${context.partitionId}: ${err.message}`);
medium line 110

Template literal with variable interpolation in command context

SourceSKILL.md
110`https://${storageAccount}.blob.core.windows.net/${containerName}`,
medium line 127

Template literal with variable interpolation in command context

SourceSKILL.md
127console.log(`Processing: ${JSON.stringify(event.body)}`);
medium line 135

Template literal with variable interpolation in command context

SourceSKILL.md
135console.error(`Error: ${err.message}`);
medium line 165

Template literal with variable interpolation in command context

SourceSKILL.md
165console.log(`Partitions: ${hubProperties.partitionIds}`);
medium line 169

Template literal with variable interpolation in command context

SourceSKILL.md
169console.log(`Last sequence: ${partitionProperties.lastEnqueuedSequenceNumber}`);
medium line 224

Template literal with variable interpolation in command context

SourceSKILL.md
224console.log(`Type: ${event.properties?.eventType}`);
medium line 225

Template literal with variable interpolation in command context

SourceSKILL.md
225console.log(`Sequence: ${event.sequenceNumber}`);
medium line 226

Template literal with variable interpolation in command context

SourceSKILL.md
226console.log(`Enqueued: ${event.enqueuedTimeUtc}`);
medium line 227

Template literal with variable interpolation in command context

SourceSKILL.md
227console.log(`Offset: ${event.offset}`);
low line 37

Access to .env file

SourceSKILL.md
37const fullyQualifiedNamespace = process.env.EVENTHUB_NAMESPACE!;
low line 38

Access to .env file

SourceSKILL.md
38const eventHubName = process.env.EVENTHUB_NAME!;
low line 110

External URL reference

SourceSKILL.md
110`https://${storageAccount}.blob.core.windows.net/${containerName}`,
Scanned on Feb 21, 2026
View Security Dashboard