ensure-pipelines-host

Pass

Audited by Gen Agent Trust Hub on Aug 1, 2026

Risk Level: SAFEREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • Remote Provisioning and Execution Patterns: The skill includes mechanisms to provision environment hosts using BAP (Business App Platform) APIs and can execute script-based installation of the Power Platform Pipelines application via Node.js scripts (provision-platform-host.js, install-pipelines-app.js). These capabilities are documented as part of the primary host-setup workflow for Power Platform administrators.
  • External Data Retrieval: The skill fetches configuration data and guidelines from learn.microsoft.com and Microsoft Graph to ensure alignment with current tenant metadata and documentation. These sources are considered well-known and trusted in the context of Microsoft service administration.
  • Interactive Command Execution: Shell commands such as az account get-access-token and pac admin list are utilized to manage authentication and inventory environments. These are standard tools for the Power Platform CLI and Azure CLI ecosystems.
  • Built-in Governance Markers: The skill implements mandatory confirmation gates, echoing tenant IDs and request bodies before firing provisioning calls, which serves as a mitigation against unintended actions in the wrong tenant context.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 1, 2026, 03:26 AM
Security Audit — agent-trust-hub — ensure-pipelines-host