pbir-cli
Fail
Audited by Gen Agent Trust Hub on Oct 17, 2026
Risk Level: HIGHEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The script bin/fetch.sh downloads portable binaries from github.com/maxanatsko/pbir.tools. This repository is not associated with the skill author data-goblin and is not a well-known service or trusted organization.- [REMOTE_CODE_EXECUTION]: The skill instructions in bin/README.md and SKILL.md encourage users to execute binaries downloaded from an unverified external repository. Specifically, it facilitates the use of pbir-portable-windows-x64.exe and macOS equivalents. Running opaque executables from untrusted sources is a critical security risk.- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted report files and metadata, creating a vulnerability surface.
- Ingestion points: Processes Power BI report files (.pbir, .pbip, .pbix) and executes DAX queries against semantic models via pbir model -q.
- Boundary markers: None provided in instructions or templates to distinguish between data and instructions.
- Capability inventory: Subprocess execution via pbir CLI, network operations via pbir publish, and local file system access.
- Sanitization: No input validation or sanitization of external data sources before they are used in command lines or prompt interpolation.
Recommendations
- AI detected serious security threats
Audit Metadata