The Agent Skills Directory

Command Execution via CLI Integration: The skill includes several Python scripts (scripts/refresh_model.py, scripts/rebind_report.py, and scripts/list_refresh_history.py) that interface with the fab CLI tool using the subprocess module. This is a standard pattern for CLI-wrapper skills. The scripts employ list-based execution (subprocess.run(['fab'] + args)) rather than shell-string execution, which is a security best practice that mitigates common command injection vulnerabilities.
API Interaction with Sensitive Entities: Much of the skill involves using the fab api command to interact with Power BI REST APIs, including operations for updating data source credentials and taking over model ownership. The documentation provides examples with placeholder values (e.g., 'user', 'pass', ''). While these operations are powerful, they are gated by the user's existing authentication state via fab auth login and appropriate workspace permissions.
Input Sanitization in Scripts: The automation scripts include logic to validate and format paths (e.g., ensuring .SemanticModel or .Report suffixes), which helps ensure commands are directed at the correct item types and reduces the likelihood of accidental misconfiguration.

fabric-cli-powerbi