review-report
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill's Python scripts utilize
subprocess.runto call theaz(Azure CLI) andfab(Fabric CLI) tools. These operations are used to retrieve OAuth2 access tokens and query the Power BI REST API. Commands are passed as lists of arguments to prevent shell injection. - [DYNAMIC_EXECUTION]: The
performance_audit.pyscript exports Power BI report definitions to local temporary directories and parses the resulting PBIR (JSON) metadata. This enables static analysis of visual complexity and configuration patterns. - [EXTERNAL_DOWNLOADS]: The scripts employ the
requestslibrary to communicate with official Microsoft and Power BI service endpoints (e.g.,analysis.windows.net,powerbi.com) to retrieve usage telemetry and metadata.
Audit Metadata