power-bi-sales-analytics-dashboard
Pass
Audited by Gen Agent Trust Hub on Jul 11, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructions direct the user to clone a repository from GitHub (
https://github.com/MahbubNibir/power-bi-retail-analytics-viz.git). Although GitHub is a common platform, the repository is maintained by an external account that is not verified as a trusted vendor. - [COMMAND_EXECUTION]: The installation and setup sections involve the execution of shell commands, including
git cloneto retrieve external code,unzipto process data archives, andstart/opento launch the Power BI application on the host system. - [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection as it ingests data from external CSV and SQL sources and uses it to generate dynamic natural language insights.
- Ingestion points: External data is ingested from
global_superstore.csvand remote SQL Server databases (SalesDB) via Power Query M. - Boundary markers: The instructions lack explicit boundary markers or delimiters to separate untrusted data from the agent's internal instruction context.
- Capability inventory: The skill environment allows for shell command execution (git, unzip) and local file system interactions.
- Sanitization: There is no documented evidence of input validation, filtering, or sanitization of the transaction data before it is processed by the insights generator.
Audit Metadata