create-site
Pass
Audited by Gen Agent Trust Hub on Nov 7, 2026
Risk Level: SAFEDYNAMIC_CONTEXT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- Dynamic Context Injection: The skill executes a version check script immediately upon being loaded. This is a routine maintenance pattern used to ensure the agent is utilizing a compatible version of its supporting scripts.
- External Resource Access: This skill fetches site templates, preview images, and configuration data from the vendor's official GitHub repositories. This allows the skill to provide up-to-date starting points for new projects from a verified source.
- System Command Execution: The skill orchestrates the project lifecycle using standard development and administrative tools. This includes
npmfor package management,gitfor versioning, and the Power Platform and Azure CLIs for environment interactions. These operations are conducted within the context of the user's project directory. - Indirect Prompt Injection Surface: The skill ingests user-provided site metadata and content from external templates to guide the scaffolding process. To mitigate associated risks, the skill implements data validation, uses canonicalized identifiers for technical configurations, and requires explicit user sign-off on implementation plans before execution.
Audit Metadata