erp-xpp
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- Official Tooling Integration: The skill leverages the Power Platform CLI (pac) and Dataverse CLI, which are standard, vendor-provided tools for managing the X++ development lifecycle.
- Environment and Identity Verification: Robust preflight checks require the agent to confirm the Dataverse environment and linked ERP URL, ensuring actions are performed against the correct target.
- Managed SDK Installation: The skill includes instructions for installing X++ SDKs via official CLI commands (pac tool xpp install). This involves downloading vendor-provided resources to the local development environment as part of the intended setup process.
- Strict Runtime Safety Gates: All post-deployment validation, including artifact execution and data entity queries, is strictly opt-in. The skill requires the user to provide specific inputs and success/failure criteria before any runtime invocation occurs.
- Data Ingestion Surface: The skill processes content such as X++ source code (src/), deployment logs, and metadata files (.erp/xpp.json). This data flows into shell commands (pac, dataverse). To mitigate potential risks, the skill implements strict safety rules requiring explicit user confirmation for all inputs and effects. Its capabilities include shell command execution, file system writes, and network operations. Sanitization is achieved through mandatory validation against source contracts and verification of all external parameters before use.
Audit Metadata