power-query

Pass

Audited by Gen Agent Trust Hub on Oct 29, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The included Python scripts use subprocess.run to invoke standard command-line tools for authentication and data retrieval.
  • Evidence: execute_m.py runs az account get-access-token to securely obtain an API access token from the Azure CLI.
  • Evidence: preview_partition.py runs fab get to retrieve semantic model definitions (TMDL) from the workspace.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes external data definitions and executes the contained logic via a remote API, representing a standard developer workflow.
  • Ingestion points: preview_partition.py fetches Table Model Definition Language (TMDL) content from the user's workspace using the fab CLI.
  • Boundary markers: The scripts extract M expressions using regular expressions but do not include specific safety delimiters for the embedded content.
  • Capability inventory: The skill can execute local CLI tools (az, fab) and perform network requests to the Microsoft Fabric API (api.fabric.microsoft.com).
  • Sanitization: No specific filtering or escaping is applied to the extracted M code, as the tool is designed to test and validate the code exactly as it exists in the source model.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 29, 2026, 03:57 AM