power-bi-pbip-report
Pass
Audited by Gen Agent Trust Hub on May 27, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The
validate_report.pyscript fetches official Power BI JSON schemas from Microsoft's developer portal and GitHub repositories. This behavior is documented and includes a security allowlist that restricts connections to trusted Microsoft domains (developer.microsoft.com,raw.githubusercontent.com/microsoft/). - [COMMAND_EXECUTION]: The skill provides a suite of Python CLI tools (
pbir_gate.py,finalize_pbir.py,design_quality_check.py) used to automate the report generation workflow. These scripts perform structural file modifications, coordinate calculations for visual grids, and design consistency checks within the provided report directory. - [SAFE]: The skill demonstrates secure coding practices, such as handled JSON parsing, UTF-8/BOM encoding support, and explicit allowlisting for network operations. Analysis of the scripts and reference templates found no evidence of prompt injection, hardcoded credentials, or persistence mechanisms.
Audit Metadata