activate-site

Pass

Audited by Gen Agent Trust Hub on Oct 24, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTION
Full Analysis
  • Command Execution: The skill utilizes the Bash tool to invoke official Microsoft command-line interfaces, including pac (Power Platform CLI) and az (Azure CLI). These tools are employed for authentication, environment discovery, and site management within the user's authorized context.
  • External Resource Management: The instructions include a fallback for users missing the Power Platform CLI, directing them to install the official Microsoft.PowerApps.CLI.Tool via the dotnet tool. This is a standard procedure for setting up the required developer environment.
  • Dynamic Execution: The skill uses node -e commands to perform local file system operations, such as creating directories and writing metadata files (last-activate.json). This pattern is used to maintain state within the project's documentation folder and is limited to structured data storage.
  • Network Communication: The activation process involves making POST requests and polling status updates from Power Platform REST API endpoints. The skill dynamically resolves these API base URLs based on the detected cloud environment (e.g., Public, UsGov, China) to ensure requests are routed to the appropriate official service boundaries.
  • User Confirmation Gates: The workflow incorporates mandatory approval steps using the AskUserQuestion tool. The agent is instructed to present all resolved parameters—such as site name, subdomain, and environment ID—to the user for explicit confirmation before initiating any site provisioning calls.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 24, 2026, 03:40 PM