The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill provides instructions to scaffold projects using npx degit from the Microsoft GitHub organization. These resources are from a well-known, trusted source and represent standard project initialization procedures.
[COMMAND_EXECUTION]: Detailed guidance is provided for using the official Power Platform CLI (pac) to manage authentication, environment selection, data source integration, and application deployment. These are standard developer operations for the target platform.
[INDIRECT_PROMPT_INJECTION]: The skill includes a "Vibe Coding" workflow that processes natural language descriptions to generate application architectures and code. This introduces a surface for indirect prompt injection; however, the skill explicitly mandates a structured "Plan Designer" workflow (Describe, Plan, Approve, Build) which incorporates human-in-the-loop validation before any code generation or execution occurs.
[DATA_EXPOSURE]: Documentation includes examples for service principal authentication using placeholders (e.g., <client-id>, <secret>). No hardcoded credentials or sensitive data were found in the skill content.
[DEPLOYMENT_PRACTICES]: The skill documents a fallback deployment method using a PowerShell script to upload web resources to Dataverse. This script uses standard Dataverse Web API endpoints and employs Base64 encoding for the legitimate purpose of meeting API requirements for the content field.

power-apps-code-apps