edit-offline-profile

Pass

Audited by Gen Agent Trust Hub on Sep 1, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [Local Script Execution]: The skill executes several Node.js scripts located within the project's directory structure (scripts/resolve-environment.js, scripts/dataverse-request.js). This is a standard pattern for delegating complex logic to standalone utilities in a development environment.
  • [System Command Usage]: The skill uses bash to verify the existence of configuration files (test -f power.config.json). This is a common and safe practice for environment validation.
  • [Dataverse API Interaction]: The workflow performs GET, PATCH, and POST requests to Microsoft Dataverse endpoints to manage offline profiles. The use of targeted publishing (PublishXml) instead of global publishing is noted as a best practice to avoid rate-limiting issues on shared environments.
  • [User Confirmation Gate]: A security best practice is implemented in Step 3, where the agent is required to present a diff of the proposed changes and obtain explicit user confirmation via AskUserQuestion before proceeding with any modifications.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 1, 2026, 10:29 AM
Security Audit — agent-trust-hub — edit-offline-profile