add-pen-input
Pass
Audited by Gen Agent Trust Hub on Oct 10, 2026
Risk Level: SAFE
Full Analysis
- Dependency Verification: The skill performs a check to ensure that the
@microsoft/power-apps-native-pen-inputpackage is already present in the project'spackage.json. It explicitly refuses to install the package or modify native configuration if it is missing, which is a standard safety measure against unauthorized package installation. - Environment Integrity Checks: The skill uses
bashcommands to verify the presence of required configuration files (app.config.js,package.json, etc.) before execution. These checks are diagnostic in nature and do not perform administrative or high-privilege operations. - Vendor Resource Usage: The skill utilizes the
@microsoft/power-apps-native-pen-inputpackage, which is a resource originating from the skill author's own infrastructure. This represents intended functionality within the vendor's ecosystem. - Secure Tool Execution: The skill uses
npx --no-install tscfor type-checking. The--no-installflag is a security best practice that prevents the tool from fetching and executing unverified remote packages during the verification phase.
Audit Metadata