dv-admin

Pass

Audited by Gen Agent Trust Hub on Sep 29, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • Command Execution Framework: The skill utilizes the Microsoft Power Platform CLI (pac) to perform environment administration. This is a powerful interface that allows for significant changes to environment configuration and data state.
  • Indirect Prompt Injection Surface: The skill allows users to provide FetchXML filters for bulk delete and archival tasks. While the skill includes instruction-level guardrails requiring explicit user confirmation, the processing of user-supplied XML represents a standard surface for indirect prompt injection that warrants review.
  • Local Script Integration: Python scripts within the skill dynamically include a local scripts directory for authentication purposes. This facilitates modularity but requires that the execution environment maintains strict control over the contents of that directory.
  • High-Impact Data Operations: The skill provides access to bulk deletion commands which are irreversible. The presence of detailed safety instructions for the agent to verify entity names and user intent is a key security measure for managing these operations safely.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 29, 2026, 04:25 PM