add-sharepoint
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- Command Execution: The skill utilizes Azure CLI (
az) and Power Apps CLI (pa) to authenticate with Microsoft services and manage SharePoint connectors. These are standard tools for the described development workflow. - API Authentication and Token Management: The workflow involves generating Bearer tokens via
az account get-access-tokento interact with the Microsoft Graph API. This is a common practice for programmatic resource management, though it does mean the agent handles active session tokens. - External Data Processing (Indirect Prompt Injection): The skill queries and processes information from existing SharePoint sites, such as list schemas and site IDs, to suggest configurations. While this introduces a surface for indirect prompt injection from external data, it is a necessary part of the skill's integration logic and follows standard implementation patterns.
Audit Metadata