assign-offline-profile
Pass
Audited by Gen Agent Trust Hub on Oct 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- Command Execution: The skill utilizes the Bash tool to execute local scripts (such as
resolve-environment.jsanddataverse-request.js) and Node.js commands to manage project configuration. These operations are restricted to the local environment and the skill's own internal logic. - Dataverse API Interaction: The skill performs network operations to interact with Dataverse Web APIs for querying and updating memberships. These actions are triggered by explicit user workflows and are necessary for the skill's core purpose of profile management.
- Indirect Prompt Injection Surface: The skill processes external data, including user-provided UPNs, team names, and responses from Dataverse APIs, to determine which memberships to create or delete. While this represents a potential injection surface where maliciously crafted data could influence the agent's logic, the skill mitigates this by using structured workflows and requiring a final human-in-the-loop confirmation before performing write operations.
- File System Interaction: The skill reads from local configuration files (
power.config.json,offline-profile.json) and updates a local documentation file (memory-bank.md) to maintain state. These actions follow standard project management patterns.
Audit Metadata