activate-site
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTION
Full Analysis
- Command Execution: The skill utilizes the Bash tool to invoke official Microsoft command-line interfaces, including
pac(Power Platform CLI) andaz(Azure CLI). These tools are employed for authentication, environment discovery, and site management within the user's authorized context. - External Resource Management: The instructions include a fallback for users missing the Power Platform CLI, directing them to install the official
Microsoft.PowerApps.CLI.Toolvia thedotnettool. This is a standard procedure for setting up the required developer environment. - Dynamic Execution: The skill uses
node -ecommands to perform local file system operations, such as creating directories and writing metadata files (last-activate.json). This pattern is used to maintain state within the project's documentation folder and is limited to structured data storage. - Network Communication: The activation process involves making
POSTrequests and polling status updates from Power Platform REST API endpoints. The skill dynamically resolves these API base URLs based on the detected cloud environment (e.g., Public, UsGov, China) to ensure requests are routed to the appropriate official service boundaries. - User Confirmation Gates: The workflow incorporates mandatory approval steps using the
AskUserQuestiontool. The agent is instructed to present all resolved parameters—such as site name, subdomain, and environment ID—to the user for explicit confirmation before initiating any site provisioning calls.
Audit Metadata