azuresql-db-scaffold

SUSPICIOUS. The skill’s purpose and capabilities mostly align, and data flows stay within expected Microsoft/Azure endpoints, but the core dependency is a private preview executable container image that is not publicly verifiable and is run with credentials. Mutable `:latest`, shared pull credentials, and secret forwarding make this high security risk even without evidence of confirmed malicious intent.