The Agent Skills Directory

[COMMAND_EXECUTION]: The skill's Python scripts (e.g., pbir_gate.py, pbir_utils.py) use the subprocess module to invoke the official Microsoft powerbi-report-author CLI and the git version control tool. These calls are essential for the skill's core functionality, such as report validation, state checking, and automated layout updates.
[EXTERNAL_DOWNLOADS]: The documentation instructs users to install the @microsoft/powerbi-report-authoring-cli package via npm. This is a well-known, official utility provided by Microsoft for the Fabric ecosystem. The skill also references official Microsoft JSON schemas for PBIR validation.
[INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data in the form of Power BI report JSON files and layout specifications (spec.json). While this creates an ingestion surface, the Python scripts perform deterministic structural transformations (such as coordinate rounding and theme token replacement) rather than natural language interpretation. All modifications are subjected to a mandatory validation gate using the official CLI.
[DYNAMIC_EXECUTION]: Static analysis identified a dynamic import of pytest in scripts/tests/test_pbir_gate.py. This is a standard practice in Python test suites to handle test dependencies and does not represent a security risk.

power-bi-report-authoring