edit-offline-profile

Pass

Audited by Gen Agent Trust Hub on Jul 29, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [Internal Script Execution]: The skill executes several Node.js scripts located in the vendor's utility directory (e.g., resolve-environment.js, dataverse-request.js). These scripts are used to resolve environment identifiers and perform authenticated API requests to Dataverse endpoints. This is a standard pattern for environment-aware tools.
  • [Local Configuration Access]: The skill reads from and writes to project-specific files such as power.config.json, offline-profile.json, and .datamodel-manifest.json. This data ingestion is necessary to identify the target profile and apply the requested changes locally.
  • [Shell Command Construction]: The skill uses bash to run Node.js commands that include parameters derived from user arguments and project files. While this creates a standard interaction surface, the operations are directed toward known internal scripts and official API endpoints.
  • [Network API Interaction]: The skill performs GET, PATCH, and POST requests to Dataverse environments to update profile metadata and trigger publishing actions (PublishXml). These network operations are part of the core functionality for synchronizing local profile changes with the remote environment.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 29, 2026, 03:31 AM
Security Audit — agent-trust-hub — edit-offline-profile