The Agent Skills Directory

Environment Diagnostics via Shell Command: The skill utilizes the Bash tool to execute dotnet --list-sdks. This is a security consideration as it runs a command on the host system, but its purpose is restricted to verifying that the required .NET 10 SDK is installed for the MCP server to function correctly.
User-Supplied Configuration Processing: The skill ingests a Power Apps Studio URL from the user to extract parameters like ENV_ID and APP_ID. While processing external data is an attack surface, the extraction logic is specific to expected URL patterns for the Power Apps platform, which are then passed to a dedicated connection tool.
Authentication Flow Management: The instructions guide the agent to manage authentication flows (browser, broker, or device code) based on session errors or user preference. These are standard identity management patterns for Entra ID (formerly Azure AD) and are used to ensure the agent authenticates as the correct user for the coauthoring session.
Trusted Resource References: The skill directs users to the official Microsoft download page for the .NET SDK if it is missing. This follows the practice of using trusted, well-known services for environment dependencies.

configure-canvas-mcp