canvas-app

Pass

Audited by Gen Agent Trust Hub on Oct 10, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • Command Execution: The skill utilizes the Bash tool to perform administrative tasks, such as creating dedicated directories for application development. This is a standard utility function used to organize the local workspace environment.
  • Indirect Prompt Injection Surface: The skill ingests user-supplied requirements and artifacts generated by other agents to automate the creation of Power Apps YAML files. While processing external data creates a potential surface for indirect instructions, the skill implements a rigorous multi-step validation process. This includes verifying requirement coverage against functional test matrices, checking action contracts, and performing compile-time checks to ensure the integrity of the generated output.
  • Agent Orchestration and Task Management: The skill coordinates complex workflows by spawning sub-tasks using the Task tool. This modular design facilitates specialized processing of different application components but involves the coordination of multiple execution contexts which requires monitoring.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 10, 2026, 08:03 AM