refresh-semantic-model
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes a Python script (scripts/refresh_model.py) that executes the 'fab' CLI using subprocess.run to interact with the Power BI REST API. The command is passed as a list of arguments and does not use shell=True, which is a secure practice that prevents shell injection. This execution is the intended functionality of the skill.\n- [SAFE]: No indicators of prompt injection, data exfiltration, obfuscation, or unauthorized privilege escalation were detected. The network activity is directed toward Microsoft Power BI APIs via the fabric-cli tool, which is consistent with the skill's stated purpose as an administrative utility.
Audit Metadata