add-pen-input

Pass

Audited by Gen Agent Trust Hub on Oct 10, 2026

Risk Level: SAFE
Full Analysis
  • Dependency Verification: The skill performs a check to ensure that the @microsoft/power-apps-native-pen-input package is already present in the project's package.json. It explicitly refuses to install the package or modify native configuration if it is missing, which is a standard safety measure against unauthorized package installation.
  • Environment Integrity Checks: The skill uses bash commands to verify the presence of required configuration files (app.config.js, package.json, etc.) before execution. These checks are diagnostic in nature and do not perform administrative or high-privilege operations.
  • Vendor Resource Usage: The skill utilizes the @microsoft/power-apps-native-pen-input package, which is a resource originating from the skill author's own infrastructure. This represents intended functionality within the vendor's ecosystem.
  • Secure Tool Execution: The skill uses npx --no-install tsc for type-checking. The --no-install flag is a security best practice that prevents the tool from fetching and executing unverified remote packages during the verification phase.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 10, 2026, 08:02 AM