fabric-sdk
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFENO_CODEINDIRECT_PROMPT_INJECTION
Full Analysis
- Trusted Vendor Resource: The skill references the
@microsoft/fabric-app-datapackage. This is a legitimate resource from a trusted organization used for its intended purpose of data connectivity. - Data Ingestion Surface: The documentation explains how to retrieve data from Fabric semantic models. This creates a surface where an agent might process external content, a common pattern in data-integration skills.
- Ingestion points: External data enters the context through DAX queries as shown in
SKILL.md. - Boundary markers: None are explicitly defined in the provided documentation examples.
- Capability inventory: The skill contains no scripts or automated tools; it consists entirely of Markdown content.
- Sanitization: The documentation focuses on SDK usage and does not detail specific data sanitization steps.
- No-Code Implementation: The skill consists purely of informational Markdown files. It does not include scripts, binaries, or automated commands, which significantly reduces the potential for direct security issues.
Audit Metadata