add-office365
Pass
Audited by Gen Agent Trust Hub on Nov 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [Indirect Prompt Injection Surface]: The skill provides functionality to read emails and calendar events (e.g.,
GetEmails,GetEventsCalendarViewV2). This data originates from external sources and warrants review for potentially embedded instructions.\n - Ingestion points:
Office365OutlookServicemethods insrc/generated/services/Office365OutlookService.ts.\n - Boundary markers: No explicit delimiters or warnings for external content processing are defined in the provided snippets.\n
- Capability inventory: The skill leverages tools for file system modification (
Edit,Write) and shell command execution (Bash).\n - Sanitization: The provided examples do not include explicit content sanitization or escaping logic.\n- [Command Line Interaction]: The skill interacts with system tools to configure the application environment.\n
- Evidence: Execution of commands such as
pa app add data-sourceandnpm run build.\n - Context: These are standard operations for managing and building Power Apps projects.
Audit Metadata