bpa-rules
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze external semantic model definitions (TMDL and .bim files) which represent untrusted data that could contain malicious instructions meant to influence agent behavior.
- Ingestion points: Local file access via
ReadandGreptools for TMDL files and.bimfiles, as well as remote metadata retrieval via thefabCLI. - Boundary markers: The skill instructions do not explicitly mandate the use of delimiters or 'ignore embedded instructions' warnings when interpolating model data into the prompt context.
- Capability inventory: The skill can read local files, execute shell commands (e.g.,
fab,jq, and the providedvalidate_rules.pyscript), and generate C# and DAX logic. - Sanitization: No explicit sanitization, validation, or escaping of model content is described before the data is processed by the AI.
Audit Metadata