add-geolocation
Pass
Audited by Gen Agent Trust Hub on Jul 29, 2026
Risk Level: SAFE
Full Analysis
- Implementation Controls: The skill strictly enforces the use of
@microsoft/power-apps-native-bglocation, which is a recognized vendor package. It includes explicit 'Hard rules' that mandate secure authentication (MSAL) and prohibit the use of legacy or insecure bridging mechanisms. - Dataverse Table Verification: A notable security and stability feature is the verification step for the
msdyn_locationrecordstable. The skill checks for the table and its specific schema using official scripts before allowing the feature to be enabled, preventing unauthorized data structures. - Least Privilege and Scope: The skill explicitly forbids the installation of new packages or modification of native configurations, limiting its operational scope to the existing project environment.
- Input Validation: The skill uses strict TypeScript typing for tracking targets and includes error handling that maps native mobile platform errors (like permission denials) to specific application logic, ensuring safe handling of user privacy settings.
- Infrastructure Integrity: The shell commands used for environment resolution and Dataverse requests point to the project's internal
/scriptsdirectory, ensuring that execution relies on local, verified tooling rather than external remote sources.
Audit Metadata