canvas-apps
Pass
Audited by Gen Agent Trust Hub on Apr 10, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [SAFE]: The skill is focused on legitimate Power Platform development. It includes proactive security advice, specifically warning about potential XSS vulnerabilities when using the
HtmlTextcontrol with untrusted user data incontrols-reference.md. It also emphasizes the importance of delegation to prevent data loss when querying large datasets. - [COMMAND_EXECUTION]: The
canvas-alm.mdfile contains examples of using the Power Platform CLI (pac) for unpacking and packing app source files (e.g.,pac canvas unpack). These commands are essential for source control integration and represent standard professional development workflows for the platform. - [SAFE]: The
offline.mdfile provides instructions for implementing offline capabilities usingSaveDataandLoadData. These functions are used for local caching of records on the user's device to ensure app functionality without network connectivity, which is a core feature of the technology and does not involve unauthorized data movement.
Audit Metadata