Skills azure-storage-blob-ts
📦
azure-storage-blob-ts
Content revision r2 Medium Risk ⚙️ External commands🌐 Network access📁 Filesystem access🔑 Env variables
Build Azure Blob Storage Workflows in TypeScript
Azure Blob Storage code requires careful authentication, transfer, and permission choices. This skill provides focused TypeScript and JavaScript patterns for common SDK workflows.
Supports: Claude Codex Code(CC)
Install with my Agent
Copy this request to your Agent. It includes the canonical Skill page and manifest.
Agent request
Review the Skillstore skill "azure-storage-blob-ts" from https://skillstore.io/skills/sickn33-azure-storage-blob-ts.md and its manifest at https://skillstore.io/api/skills/sickn33-azure-storage-blob-ts/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.Your Agent should still show its plan and request any confirmation required by the security policy.
Agent-readable resources
Use these links when an AI agent, crawler, or script needs clean context instead of reading the full page.
Test it
Using "azure-storage-blob-ts". Show me how to upload a PDF from Node.js with managed identity.
Expected outcome:
- Authentication: use DefaultAzureCredential with the storage account endpoint.
- Transfer: upload the local PDF and set the application/pdf content type.
- Checks: verify access, report progress, and handle authorization or conflict errors.
Using "azure-storage-blob-ts". Review a browser upload SAS that grants write and delete access for one day.
Expected outcome:
- Risk: delete permission and a one-day lifetime exceed the upload requirement.
- Recommendation: allow only required actions, use a short expiry, and restrict the destination.
- Operations: keep account keys on the server and never log the issued token.
Using "azure-storage-blob-ts". Explain why a container creation request returns status 409.
Expected outcome:
- Cause: the container probably exists or conflicts with another operation.
- Response: use createIfNotExists for idempotent setup and preserve unexpected error details.
Security Audit
Medium Riskv5 • 7/23/2026 Open versioned report
All 102 static findings are false positives caused by Markdown, TypeScript templates, expected Azure endpoints, named environment variables, and a placeholder file stream. One medium issue remains because the container and account SAS examples grant broad permissions for 24 hours.
1
Files scanned
492
Lines analyzed
0
Review items
0
False positives ignored
Confirmed security concerns (1)
Medium
Over-Privileged SAS Token Examples
Container SAS uses read, add, create, write, delete, and list permissions for 24 hours. Account SAS grants all permissions for 24 hours.
The broad permission strings, 24-hour expirations, and all-permissions comment are explicit in the examples.
Risk Factors
⚙️ External commands (50)
SKILL.md:15-17 SKILL.md:17-24 SKILL.md:24-29 SKILL.md:29-35 SKILL.md:35-41 SKILL.md:41-44 SKILL.md:44-48 SKILL.md:48-54 SKILL.md:54-58 SKILL.md:58-66 SKILL.md:66-69 SKILL.md:69-73 SKILL.md:73-80 SKILL.md:80-82 SKILL.md:82-86 SKILL.md:86-93 SKILL.md:93-99 SKILL.md:99-105 SKILL.md:105-109 SKILL.md:109-118 SKILL.md:118-122 SKILL.md:122-126 SKILL.md:126-132 SKILL.md:132-142 SKILL.md:142-146 SKILL.md:146-149 SKILL.md:149-153 SKILL.md:153-161 SKILL.md:161-163 SKILL.md:163-167 SKILL.md:167-178 SKILL.md:178-182 SKILL.md:182-196 SKILL.md:196-200 SKILL.md:200-203 SKILL.md:203-207 SKILL.md:207-211 SKILL.md:211-215 SKILL.md:215-229 SKILL.md:229-231 SKILL.md:231-234 SKILL.md:234-238 SKILL.md:238-247 SKILL.md:247-251 SKILL.md:251-258 SKILL.md:258-264 SKILL.md:264-272 SKILL.md:272-276 SKILL.md:276-281 SKILL.md:281-285
🌐 Network access (4)
📁 Filesystem access (1)
Audited by: codex View Audit History →
Share & cite this report
Share the versioned assessment report, neutral badge, embed card, and citations. Skillstore reports evidence without deciding whether this Skill is safe.
Copy report link
https://skillstore.io/skills/sickn33-azure-storage-blob-ts/audits/5?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown badge
[](https://skillstore.io/skills/sickn33-azure-storage-blob-ts?utm_source=security_passport_badge)HTML badge
<a href="https://skillstore.io/skills/sickn33-azure-storage-blob-ts?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/sickn33-azure-storage-blob-ts/security.svg" alt="Skillstore security assessment" loading="lazy"></a>Embed card
<iframe src="https://skillstore.io/embed/skills/sickn33-azure-storage-blob-ts.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>Academic citations (APA · BibTeX · CFF)
APA citation
sickn33. (2026). azure-storage-blob-ts security audit report (audit version 5) [Author version unspecified]. Skillstore. https://skillstore.io/skills/sickn33-azure-storage-blob-ts/audits/5BibTeX citation
@techreport{sickn33-sickn33-azure-storage-blob-ts-2026,
author = {sickn33},
title = {azure-storage-blob-ts security audit report (audit version 5)},
institution = {Skillstore},
year = {2026},
number = {5},
url = {https://skillstore.io/skills/sickn33-azure-storage-blob-ts/audits/5},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "azure-storage-blob-ts security audit report (audit version 5)"
version: "unspecified"
type: report
authors:
- name: "sickn33"
date-released: "2026-07-23"
url: "https://skillstore.io/skills/sickn33-azure-storage-blob-ts/audits/5"
identifiers:
- type: other
value: "skillstore:sickn33-azure-storage-blob-ts:audit:5"
description: "Skillstore immutable audit report identifier"
Skillstore Score
Why this score Evidence Confidence: High 55
Architecture
85
Maintainability
87
Content
69
Community
83
Spec Compliance
What You Can Build
Build a backend storage service
Implement authenticated blob uploads, downloads, listing, metadata updates, and error handling in a Node.js service.
Prepare secure browser uploads
Design browser uploads with short-lived SAS access and uploadData without exposing storage account keys.
Automate storage maintenance
Create maintenance utilities for containers, blob copies, file transfers, and narrowly scoped SAS generation.
Try These Prompts
Connect with managed identity
Create a minimal TypeScript example that connects to [ACCOUNT_NAME] with DefaultAzureCredential and lists containers. Include required packages and basic error handling.
Build a file transfer flow
Create a Node.js TypeScript service that uploads [LOCAL_PATH] to [CONTAINER]/[BLOB_NAME] and downloads it to [DESTINATION]. Stream large files and report progress.
Design a browser upload
Design a browser upload flow for [FILE_TYPE] using a server-issued, short-lived SAS token. Restrict permissions and validate size, type, and destination.
Harden a storage pipeline
Review my Azure Blob workflow for concurrency, retries, idempotency, conditional writes, observability, and least privilege. Propose production changes and tests.
Best Practices
- Prefer DefaultAzureCredential and managed identities instead of connection strings or account keys.
- Grant only required SAS permissions, use short expirations, and keep tokens out of logs.
- Stream large files, report progress, and handle retries and service errors explicitly.
Avoid
- Do not embed account keys, connection strings, or SAS tokens in source code.
- Do not issue broad, long-lived SAS tokens when a narrow token satisfies the operation.
- Do not buffer very large blobs when streaming methods are available.
Frequently Asked Questions
Does this skill execute Azure operations?
No. It provides guidance and examples. Generated code still needs credentials, permissions, testing, and an Azure environment.
Which authentication method should I use?
Prefer DefaultAzureCredential with managed identity. Use connection strings, account keys, or SAS only when deployment constraints require them.
Can I use these examples in a browser?
Browser clients support uploadData and SAS access. Shared keys, file streams, direct file downloads, and SAS generation require Node.js.
How should I transfer large files?
Use uploadStream, uploadFile, or downloadToFile where supported. Configure concurrency, progress reporting, retries, and memory limits for the workload.
How can I secure SAS tokens?
Use minimal permissions, short expirations, HTTPS, restricted destinations, and server-side issuance. Never log tokens or expose account keys.
Are the examples production ready?
They are starting points. Add validation, retries, observability, conditional requests, least-privilege roles, and tests for your environment.
Developer Details
Author
sickn33License
MIT
Skillstore revision
r2
Version notice
The author did not declare a version.
Repository
https://github.com/sickn33/antigravity-awesome-skills/tree/main/skills/azure-storage-blob-tsRef
f9e2c34b4f19c7f3e6b0a1e93227b5f77cc12526
Maintenance freshness
7/26/2026
Usage
6 downloads · 104 views
File structure
📄 SKILL.md