dataflows-save-as-authoring-cli

Pass

Audited by Gen Agent Trust Hub on Jul 10, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • Command Execution via Azure CLI: The skill utilizes the az rest command to interact with Power BI and Microsoft Fabric REST APIs. This is used for discovering dataflows, assessing risk signals, and executing migration operations. These operations are performed against official Microsoft domains such as api.fabric.microsoft.com and api.powerbi.com.
  • External Data Processing: The skill retrieves and parses JSON dataflow definitions and workspace metadata. As this involves processing content from external APIs, it represents a surface for indirect prompt injection. The skill follows best practices by using structured parsing tools like jq to handle this data safely.
  • Temporary File Management: For certain API operations, the skill writes temporary JSON configuration files to the /tmp/ directory. This pattern is used to ensure the integrity of API request bodies and avoid common shell escaping issues when passing complex JSON structures to the CLI.
  • Verification of Tooling: The skill includes diagnostic steps to verify the installation of required system utilities like az and jq. It provides links to official installation resources for the Azure CLI, ensuring that the execution environment is correctly configured with authentic tools.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 10, 2026, 02:44 PM
Security Audit — agent-trust-hub — dataflows-save-as-authoring-cli