canvas-app
Pass
Audited by Gen Agent Trust Hub on Oct 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- Command Execution: The skill utilizes the
Bashtool to perform administrative tasks, such as creating dedicated directories for application development. This is a standard utility function used to organize the local workspace environment. - Indirect Prompt Injection Surface: The skill ingests user-supplied requirements and artifacts generated by other agents to automate the creation of Power Apps YAML files. While processing external data creates a potential surface for indirect instructions, the skill implements a rigorous multi-step validation process. This includes verifying requirement coverage against functional test matrices, checking action contracts, and performing compile-time checks to ensure the integrity of the generated output.
- Agent Orchestration and Task Management: The skill coordinates complex workflows by spawning sub-tasks using the
Tasktool. This modular design facilitates specialized processing of different application components but involves the coordination of multiple execution contexts which requires monitoring.
Audit Metadata