power-query
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The included Python scripts use
subprocess.runto invoke standard command-line tools for authentication and data retrieval. - Evidence:
execute_m.pyrunsaz account get-access-tokento securely obtain an API access token from the Azure CLI. - Evidence:
preview_partition.pyrunsfab getto retrieve semantic model definitions (TMDL) from the workspace. - [INDIRECT_PROMPT_INJECTION]: The skill processes external data definitions and executes the contained logic via a remote API, representing a standard developer workflow.
- Ingestion points:
preview_partition.pyfetches Table Model Definition Language (TMDL) content from the user's workspace using thefabCLI. - Boundary markers: The scripts extract M expressions using regular expressions but do not include specific safety delimiters for the embedded content.
- Capability inventory: The skill can execute local CLI tools (
az,fab) and perform network requests to the Microsoft Fabric API (api.fabric.microsoft.com). - Sanitization: No specific filtering or escaping is applied to the extracted M code, as the tool is designed to test and validate the code exactly as it exists in the source model.
Audit Metadata