add-geolocation

Pass

Audited by Gen Agent Trust Hub on Oct 10, 2026

Risk Level: SAFE
Full Analysis
  • Environment and Package Validation: The skill performs initial checks on the local project structure and verifies the presence of the @microsoft/power-apps-native-bglocation package. This is a standard verification step to ensure the required dependencies are available before modifications occur.
  • Dataverse Schema Verification: The skill queries the Dataverse environment to ensure the required system table (msdyn_locationrecords) and its associated columns exist. By requiring the table to pre-exist and verifying its structure, the skill avoids unauthorized database schema changes.
  • Secure Authentication Practice: The generated implementation explicitly enforces the use of MSAL (Microsoft Authentication Library), adhering to recommended authentication standards for Microsoft services and avoiding less secure alternatives.
  • Indirect Prompt Injection Surface: The skill processes information from local configuration files and Dataverse metadata. The ingestion points are the power.config.json file and API responses for entity definitions. Boundary markers for these inputs are not explicitly defined in the instructions, which is a potential consideration when processing external data. The skill's capability inventory includes file writing and local command execution. The risk is addressed through strict schema validation and the use of trusted environment scripts for data fetching.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 10, 2026, 08:01 AM