rest-api-automation
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references the installation of official Microsoft packages such as azure-mgmt-powerbiembedded and loading the powerbi-client library from the well-known jsDelivr CDN.
- [COMMAND_EXECUTION]: The documentation includes code snippets for curl and PowerShell intended for interacting with Microsoft's OAuth2 and Power BI service endpoints. These are standard automation examples.
- [INDIRECT_PROMPT_INJECTION]: The skill provides templates for the agent to interact with external data sources and APIs (e.g., importing PBIX files). While this presents a standard data ingestion surface, the skill does not contain any malicious patterns or logic. 1. Ingestion points: API calls for importing files (/imports) and updating parameters (/Default.UpdateParameters). 2. Boundary markers: None. 3. Capability inventory: REST API network operations and file reading. 4. Sanitization: None.
Audit Metadata