azuresql-db-ci

SUSPICIOUS. The skill’s behavior mostly matches its CI-testing purpose, but its core runtime depends on a private-preview, mutable, non-publicly verifiable container image that receives a database password. That makes the skill high risk on supply-chain and credential-forwarding grounds even without direct evidence of malicious exfiltration.