pbir-cli

Warn

Audited by Socket on Oct 17, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

The skill’s capabilities are broadly aligned with its stated Power BI report-management purpose, and its data flows mainly target expected local files and official Microsoft services. The main concern is install trust: the skill depends on a closed, binary-distributed `pbir-cli`, so users must trust an unverifiable executable to inspect and modify reports and interact with service-backed contexts. That makes the skill suspicious from a supply-chain perspective, but not malicious based on the provided content.

Confidence: 89%Severity: 78%
Audit Metadata
Analyzed At
Oct 17, 2026, 05:32 PM
Package URL
pkg:socket/skills-sh/data-goblin%2Fpower-bi-agentic-development%2Fpbir-cli%2F@ede39096bfcca111db376c14542262addc6f48da35a5bf499874aab373ee10c6