Azuredatastudio
PassAudited by VirusTotal on May 11, 2026.
Overview
Type: OpenClaw Skill Name: azuredatastudio Version: 2.0.1 The skill bundle is highly deceptive, impersonating the legitimate 'Azure Data Studio' tool by using its name, description, and GitHub statistics (7,710+ stars) in SKILL.md and tips.md. However, the actual implementation in scripts/script.sh and scripts/azuredatastudio.sh consists of rudimentary bash stubs that merely log commands to a local file (~/.local/share/azuredatastudio/data.log). While no explicit malicious payloads like data exfiltration or backdoors were found, the intentional misrepresentation of the tool's identity and capabilities is a significant indicator of potential malicious intent or a low-quality placeholder.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
The command may fail or could refer to a different local executable if one already exists on the system.
The SKILL.md examples invoke `azuredatastudio`, but there is no install specification declaring how that command is installed or bound to the included scripts.
No install spec — this is an instruction-only skill.
Before use, confirm which `azuredatastudio` command will run and prefer invoking a reviewed script path directly if needed.
Sensitive query text or file names entered as command arguments could remain in a local history file.
The skill explicitly persists command history locally, which may include query terms, filenames, or other user-provided arguments.
**History log:** `$DATA_DIR/history.log` — tracks all command executions with timestamps
Avoid putting secrets in command arguments and periodically review or delete the local data directory if the history should not be retained.
Users may overestimate the skill's maturity or assume it provides real Azure Data Studio-style import/export/validation features.
One included script shows the main functionality is a stub, while the documentation presents a broader Azure Data Studio-like data toolkit.
run)
echo "TODO: Implement main functionality"Treat this as an unofficial lightweight local script and verify any data-processing results before relying on them.