migrate-to-dataverse

Pass

Audited by Gen Agent Trust Hub on Jun 20, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • Tool Invocation and Integration: The skill utilizes Model Context Protocol (MCP) tools including sync_canvas, list_data_sources, get_data_source_schema, and compile_canvas. These tools are used to synchronize the application state, enumerate data sources, and validate changes, representing standard operational patterns for development automation.
  • File System Interaction: The skill reads from and writes to local .pa.yaml files. This is a core requirement for its functionality to migrate data source references. It also references a technical guide located in the plugin's root directory for architectural consistency.
  • Input Processing Considerations: The skill processes existing Power Fx formulas from YAML files to generate new mappings. While this creates a surface for indirect prompt injection if the source files contain adversarial content, the skill includes a human-in-the-loop 'Proposed Mapping Plan' step, which provides a review checkpoint before any changes are applied to the code.
  • Validation Workflow: The use of compile_canvas after modifications serves as a safety check to ensure that the generated code is syntactically correct and functional within the Power Platform environment.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 20, 2026, 05:39 AM
Security Audit — agent-trust-hub — migrate-to-dataverse