edit-offline-profile
Pass
Audited by Gen Agent Trust Hub on Sep 1, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [Local Script Execution]: The skill executes several Node.js scripts located within the project's directory structure (
scripts/resolve-environment.js,scripts/dataverse-request.js). This is a standard pattern for delegating complex logic to standalone utilities in a development environment. - [System Command Usage]: The skill uses
bashto verify the existence of configuration files (test -f power.config.json). This is a common and safe practice for environment validation. - [Dataverse API Interaction]: The workflow performs
GET,PATCH, andPOSTrequests to Microsoft Dataverse endpoints to manage offline profiles. The use of targeted publishing (PublishXml) instead of global publishing is noted as a best practice to avoid rate-limiting issues on shared environments. - [User Confirmation Gate]: A security best practice is implemented in Step 3, where the agent is required to present a diff of the proposed changes and obtain explicit user confirmation via
AskUserQuestionbefore proceeding with any modifications.
Audit Metadata