add-connector
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- Command Execution: The skill utilizes the
pa(Power Apps) command-line interface via a shell to add data sources to the application. This involves passing parameters such as connector names and connection IDs into shell commands, which is the primary intended purpose of this development utility. - Indirect Prompt Injection Surface: The skill ingests external input, such as connector names and connection IDs, and incorporates them into the logic for configuring the application. While this interaction pattern is typical for automation scripts that process user-supplied parameters, it is a standard surface to consider in agentic environments.
- External Resource Interaction: The skill directs users to official Microsoft documentation and environment-specific connection management URLs. These references target established, well-known domains associated with the Power Platform ecosystem for legitimate configuration purposes.
Audit Metadata