erp-xpp
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFEDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- Dynamic Code Generation: The skill facilitates the creation of X++ classes, services, and metadata from templates. While this is the intended functionality for a development tool, it involves the generation and compilation of code at runtime.
- Indirect Prompt Injection Surface: The skill creates code based on user requests and interacts with data from Dataverse and ERP APIs. This potential attack surface is managed by strict safety gates that require the agent to obtain user approval for all generated code, input parameters, and environment targets before any execution or deployment occurs.
- CLI Command Execution: The skill utilizes the
pacanddataversecommand-line interfaces to perform build and deployment tasks. These commands interact with local files and remote Microsoft-managed cloud environments to manage the development lifecycle. - External SDK Installation: The skill automates the acquisition of the X++ SDK through official Microsoft channels. The agent is instructed to inform the user about the size of these downloads and the local installation paths before proceeding.
Audit Metadata