observability
Pass
Audited by Gen Agent Trust Hub on Apr 10, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill recommends the installation of the @microsoft/applicationinsights-web package via npm. This is an official Microsoft SDK for web-based telemetry collection and is a trusted dependency.
- [COMMAND_EXECUTION]: The documentation includes Azure CLI (az monitor app-insights) and PowerShell (New-AzApplicationInsights) command snippets for provisioning monitoring resources. These are standard infrastructure-as-code patterns for administrative setup.
- [DATA_EXFILTRATION]: The skill facilitates the flow of telemetry data (metrics, logs, and exceptions) from Power Platform to Azure. It provides guidance on using connection strings and environment variables to ensure data is sent to the correct, authorized endpoints.
- [INDIRECT_PROMPT_INJECTION]: The alerting mechanisms described in alerting-dashboards.md ingest telemetry data (such as plugin error messages or flow action logs) which are then forwarded to Microsoft Teams or email. While this represents a data ingestion surface, it follows standard monitoring practices without risky processing by the agent.
Audit Metadata