connect-pbid

Pass

Audited by Gen Agent Trust Hub on May 21, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill automatically manages its own dependencies by downloading the Microsoft Analysis Services TOM and ADOMD.NET client libraries from the official NuGet registry into the user's temporary directory. It also fetches reusable DAX function definitions from the official daxlib/daxlib repository on GitHub (daxlib.org).
  • [COMMAND_EXECUTION]: To provide cross-platform support for macOS users running Power BI in Parallels, the skill uses the prlctl CLI to execute PowerShell commands and scripts inside the Windows virtual machine. All PowerShell execution uses the -ExecutionPolicy Bypass flag to ensure scripts can run without manual intervention.
  • [DATA_EXFILTRATION]: The skill implements a method to identify the currently open Power BI model by reading the User.zip configuration file from the Power BI Desktop application data directory. This file is parsed to extract the local file history and determine the active workspace path.
  • [PROMPT_INJECTION]: The skill includes instructions for the agent to maintain a local "learnings" file (.claude/rules/connect-pbid.md) to record nuances encountered during model interaction. This is a workflow instruction designed for agent self-improvement and does not target safety guideline bypasses.
Audit Metadata
Risk Level
SAFE
Analyzed
May 21, 2026, 09:57 AM
Security Audit — agent-trust-hub — connect-pbid