Skills/Claude Code plugins/azure-sql-developer

azure-sql-developer@1.1.0

CAUTION

Publisher claims: "Agent skills for Azure SQL Developer, the Azure SQL Database engine running locally in a container. Teaches your agent to run the engine, connect, migrate, scaffold, build RAG, wire CI, and go local-to-cloud, using the real Private Preview image instead of the SQL Server image." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry Claude Code plugin marketplacePublisher microsoft · joined 4 days agoInstalls 0Last detonated 3 h ago
Dispute verdict

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario) on 2026-10-26 and scored it 65/100 (Caution). It is not known to be malicious, but it has behaviour or code a security policy should decide on before install. Notable findings: npx invocation of non-well-known package; npx invocation of non-well-known package; Prompting user to enter sensitive credentials. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only

Static findings

HIGH
npx invocation of non-well-known packagedocs/prerequisites.md:83 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packageCONTRIBUTING.md:34 · npx invocation of non-well-known package — may execute untrusted code
AST06
CRITICAL
Prompting user to enter sensitive credentialsskills/README.md:296 · Prompting user to enter sensitive credentials — social engineering
AST03
HIGH
npx invocation of non-well-known packageREADME.md:40 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packagedocs/agent-skills.md:160 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packagedocs/prerequisites.md:86 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packagedocs/agent-skills.md:171 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packageAGENTS.md:11 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packagedocs/getting-started.md:58 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
Access to sensitive file pathsdocs/index.html:121 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
npx invocation of non-well-known packagedocs/agent-skills.md:26 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
Access to sensitive file pathsdocs/prompts/ai-rag.md:51 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
npx invocation of non-well-known packagedocs/getting-started.md:280 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packageAGENTS.md:3 · npx invocation of non-well-known package — may execute untrusted code
AST06
CRITICAL
Prompting user to enter sensitive credentialsskills/azuresql-db-container/references/image-and-registry.md:34 · Prompting user to enter sensitive credentials — social engineering
AST03
HIGH
npx invocation of non-well-known packagedocs/llms.txt:41 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packagedocs/agent-skills.md:182 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packagedocs/agent-skills.md:150 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packageSUPPORT.md:29 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packagedocs/assets/js/main.js:122 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
URL with embedded credentialsdocs/_includes/head.html:20 · URL with embedded credentials — may be phishing or credential leaking
AST07
HIGH
npx invocation of non-well-known packagedocs/index.html:308 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
Access to sensitive file pathsdocs/index.html:110 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
npx invocation of non-well-known packagedocs/getting-started.md:291 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packagedocs/index.html:307 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packageCONTRIBUTING.md:33 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packageskills/README.md:70 · npx invocation of non-well-known package — may execute untrusted code
AST06
MEDIUM
File type combined with upload actionskills/README.md:320 · File type combined with upload action — agent may exfiltrate local data files
AST07
HIGH
npx invocation of non-well-known packageskills/README.md:73 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
Access to sensitive file pathsskills/azuresql-db-scaffold/SKILL.md:8 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
Access to sensitive file pathsdocs/prompts/offline.md:95 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
npx invocation of non-well-known packageskills/azuresql-db-schema-migration/SKILL.md:114 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
Access to sensitive file pathsskills/azuresql-db-auth/references/auth-and-secrets.md:127 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
Access to sensitive file pathsskills/azuresql-db-scaffold/references/scaffold-snippets.md:155 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
Access to sensitive file pathsskills/azuresql-db-auth/references/auth-and-secrets.md:128 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
Access to sensitive file pathsdocs/prompts/offline.md:75 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
npx invocation of non-well-known packageskills/azuresql-db-feedback/references/issue-fields.md:95 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
Access to sensitive file pathsskills/azuresql-db-scaffold/references/scaffold-snippets.md:199 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
npx invocation of non-well-known packageskills/azuresql-db-scaffold/references/scaffold-snippets.md:211 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
Access to sensitive file pathsskills/azuresql-db-scaffold/SKILL.md:99 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
Access to sensitive file pathsskills/azuresql-db-auth/SKILL.md:125 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
npx invocation of non-well-known packageskills/README.md:64 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packageskills/README.md:55 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packageskills/azuresql-db-schema-migration/SKILL.md:115 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packageskills/azuresql-db-scaffold/references/scaffold-snippets.md:188 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
npx invocation of non-well-known packageskills/azuresql-db-schema-migration/references/migration-tools.md:108 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
Access to sensitive file pathsskills/azuresql-db-auth/SKILL.md:171 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
npx invocation of non-well-known packageskills/README.md:44 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
Access to sensitive file pathsskills/azuresql-db-scaffold/SKILL.md:155 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
Access to sensitive file pathsskills/azuresql-db-auth/SKILL.md:138 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
Access to sensitive file pathsskills/azuresql-db-scaffold/references/scaffold-snippets.md:104 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
Access to sensitive file pathsskills/azuresql-db-scaffold/references/scaffold-snippets.md:68 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
npx invocation of non-well-known packageskills/azuresql-db-scaffold/SKILL.md:116 · npx invocation of non-well-known package — may execute untrusted code
AST06
HIGH
Access to sensitive file pathsdocs/prompts/sidecar.md:96 · Access to sensitive file paths — SSH keys, AWS credentials, env files, or system files
AST05
HIGH
npx invocation of non-well-known packageskills/azuresql-db-schema-migration/references/migration-tools.md:109 · npx invocation of non-well-known package — may execute untrusted code
AST06