refresh-semantic-model

Pass

Audited by Gen Agent Trust Hub on May 21, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill workflow and the scripts/refresh_model.py script use the fab (Fabric) CLI to communicate with Power BI and Fabric REST APIs. The Python script utilizes subprocess.run() with a list of arguments to execute CLI commands, which is a secure implementation that avoids shell injection. These operations are essential to the skill's documented purpose of managing semantic models.
  • [SAFE]: Analysis of the instructions and scripts found no evidence of prompt injection, data exfiltration, or persistence mechanisms. The skill correctly leverages the CLI's internal authentication state rather than requesting or hardcoding sensitive credentials.
Audit Metadata
Risk Level
SAFE
Analyzed
May 21, 2026, 09:56 AM
Security Audit — agent-trust-hub — refresh-semantic-model