pbir-cli
Warn
Audited by Socket on Oct 17, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
The skill’s capabilities are broadly aligned with its stated Power BI report-management purpose, and its data flows mainly target expected local files and official Microsoft services. The main concern is install trust: the skill depends on a closed, binary-distributed `pbir-cli`, so users must trust an unverifiable executable to inspect and modify reports and interact with service-backed contexts. That makes the skill suspicious from a supply-chain perspective, but not malicious based on the provided content.
Confidence: 89%Severity: 78%
Audit Metadata