tmdl-mastery
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The CI/CD pipeline examples reference downloads for the Tabular Editor CLI from its official GitHub repository and Best Practice Rules from Microsoft's Analysis-Services repository. These are standard, well-known resources within the Power BI development ecosystem.
- [DYNAMIC_EXECUTION]: PowerShell and Python deployment recipes use dynamic loading mechanisms (such as
System.Reflection.Assembly::LoadFromandclr.AddReference) to interface with the Analysis Services Tabular Object Model (.NET DLLs). This is the conventional method for programmatic management of semantic models. - [INDIRECT_PROMPT_INJECTION]: The skill provides patterns for the agent to ingest and process TMDL and BIM files, which constitutes an indirect prompt injection surface. However, the skill utilizes standard serialization and validation logic provided by the platform.
- Ingestion points: TMDL (
.tmdl) and BIM (.bim) model definition files. - Boundary markers: Not present.
- Capability inventory: Includes file system access (read/write), network operations (XMLA deployment), and command execution (Tabular Editor CLI).
- Sanitization: Relies on built-in
TmdlSerializerand TOM metadata validation.
Audit Metadata