dataflows-save-as-authoring-cli
Pass
Audited by Gen Agent Trust Hub on Jul 10, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- Command Execution via Azure CLI: The skill utilizes the
az restcommand to interact with Power BI and Microsoft Fabric REST APIs. This is used for discovering dataflows, assessing risk signals, and executing migration operations. These operations are performed against official Microsoft domains such asapi.fabric.microsoft.comandapi.powerbi.com. - External Data Processing: The skill retrieves and parses JSON dataflow definitions and workspace metadata. As this involves processing content from external APIs, it represents a surface for indirect prompt injection. The skill follows best practices by using structured parsing tools like
jqto handle this data safely. - Temporary File Management: For certain API operations, the skill writes temporary JSON configuration files to the
/tmp/directory. This pattern is used to ensure the integrity of API request bodies and avoid common shell escaping issues when passing complex JSON structures to the CLI. - Verification of Tooling: The skill includes diagnostic steps to verify the installation of required system utilities like
azandjq. It provides links to official installation resources for the Azure CLI, ensuring that the execution environment is correctly configured with authentic tools.
Audit Metadata