spark-authoring-cli
Pass
Audited by Gen Agent Trust Hub on Jul 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- Remote Resource Management: The skill utilizes the Azure CLI (
az rest) and standard networking tools (curl) to interact with Microsoft Fabric REST APIs (e.g.,api.fabric.microsoft.com). These operations are essential for its intended functionality of workspace and lakehouse management. - External Data Processing: The skill includes detailed instructions for reading and modifying notebook (
.ipynb) content viagetDefinitionandupdateDefinitionendpoints. This involves ingesting structured JSON data from the service, which carries an inherent risk of indirect prompt injection if the notebook content is from an untrusted source. The skill mitigates this by emphasizing validation against the official Jupyter schema and preserving existing metadata. - Version and Dependency Management: A mandatory session-level update check is implemented by comparing local package versions with remote sources. This is a standard practice for maintaining tool integrity. Additionally, the skill references well-known Python packages (e.g.,
pyspark,delta-spark) for local development and testing environments. - Secure Configuration Practices: The documentation explicitly advises against hardcoding credentials, connection strings, or workspace IDs, recommending the use of parameters, environment variables, and secure storage like Azure Key Vault.
Audit Metadata