powerbi-modeling
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data and metadata from active Power BI models, which represents an attack surface for indirect prompt injection if those models contain untrusted content designed to influence the agent's behavior.
- Ingestion points: The workflow defined in
SKILL.mdusesmodel_operations,table_operations,relationship_operations, andmeasure_operationsto connect to and extract the state of current semantic models. - Boundary markers: The instructions lack specific delimiters or
Audit Metadata