deploy-pipeline
Pass
Audited by Gen Agent Trust Hub on Jun 23, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- Command Execution: The skill orchestrates the deployment process by executing a variety of local Node.js scripts. These scripts perform tasks such as environment verification, project context detection, and parallel validation of solution packages.
- Authentication and Token Handling: It utilizes the Azure CLI (
az account get-access-token) and PAC CLI to manage credentials and acquire necessary access tokens for communicating with Power Platform host and target environments. - API Interactions: The skill interacts directly with official Power Platform OData API endpoints for stage run creation, package validation, and deployment triggering. These network operations are intrinsic to the skill's primary function.
- Environment Security Configuration: A specific feature allows for the modification of the 'blockedattachments' security setting in target environments to prevent deployment failures caused by file type restrictions (e.g., .js files). This operation is transparently gated behind a user confirmation prompt to ensure intentional modification of tenant-level settings.
- External Data Ingestion: The skill processes information from local configuration files (JSON) and retrieves documentation from Microsoft Learn via specialized search and fetch tools. This data is used to inform deployment logic and provide updated lifecycle guidance to the user.
Audit Metadata