Azure Devops MCP Replacement For OpenClaw

• Analyzed: May 15, 2026, 5:53 AM
• Findings: 1
• Version: 1.0.1
• Hash: 85b61667659bd7fa0167cd84691cdf6aecefa53b957ae5f477b483a534288151
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle is a well-implemented set of Node.js scripts designed to interact with the Azure DevOps REST API. It follows security best practices by using only built-in modules (avoiding supply chain risks), implementing input validation via the `validateSegment` and `safePath` functions in `client.js` and `wiki.js` to prevent path injection, and ensuring Personal Access Tokens (PATs) are only transmitted to official Microsoft endpoints (dev.azure.com). The instructions in SKILL.md are consistent with the code's functionality, and there is no evidence of data exfiltration, malicious execution, or harmful prompt injection.