Azuredatastudio
PassAudited by ClawScan on May 10, 2026.
Overview
The skill appears to be a local Bash-based data utility with no network or credential behavior, but it has disclosed local history storage and its Azure Data Studio branding/functionality is overstated.
This skill does not show malicious behavior in the provided artifacts. Before installing or using it, confirm what `azuredatastudio` command will actually run, remember that it appears to be a simple unofficial Bash stub rather than Microsoft Azure Data Studio, and avoid entering secrets into commands because arguments may be saved in a local history log.
Findings (3)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The command may fail or could refer to a different local executable if one already exists on the system.
The SKILL.md examples invoke `azuredatastudio`, but there is no install specification declaring how that command is installed or bound to the included scripts.
No install spec — this is an instruction-only skill.
Before use, confirm which `azuredatastudio` command will run and prefer invoking a reviewed script path directly if needed.
Sensitive query text or file names entered as command arguments could remain in a local history file.
The skill explicitly persists command history locally, which may include query terms, filenames, or other user-provided arguments.
**History log:** `$DATA_DIR/history.log` — tracks all command executions with timestamps
Avoid putting secrets in command arguments and periodically review or delete the local data directory if the history should not be retained.
Users may overestimate the skill's maturity or assume it provides real Azure Data Studio-style import/export/validation features.
One included script shows the main functionality is a stub, while the documentation presents a broader Azure Data Studio-like data toolkit.
run)
echo "TODO: Implement main functionality"Treat this as an unofficial lightweight local script and verify any data-processing results before relying on them.