dev-environment-deprecation-report
Pass
Audited by Gen Agent Trust Hub on Nov 5, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- Administrative Data Collection: The skill utilizes Power Platform and Microsoft Graph connectors to retrieve environment metadata, user identities, and resource counts. This data is essential for identifying unmanaged environments and assessing the impact of the upcoming deprecation as intended.
- Trusted Resource Reference: The skill fetches the latest deprecation dates from the official Microsoft Learn documentation. This ensures that the generated reports remain accurate as milestones evolve, utilizing a trusted vendor domain for updates.
- Bundled Script Execution: The workflow involves executing a bundled Python script to transform collected JSON data into a structured HTML report. This script-based approach ensures consistent output formatting across different runs and environments.
- Data Management and Isolation: Administrative data retrieved during the process is stored in a dedicated local workspace directory. The skill follow best practices by not hardcoding tenant-specific information and using localized files for intermediate processing.
- Indirect Prompt Injection Surface: As a tool that processes external data (from Microsoft Learn and tenant resource descriptions), the skill possesses an ingestion surface. However, the use of trusted sources and the specialized nature of the data collection minimize the potential for unintended instruction execution.
Audit Metadata