force-link-environment
Pass
Audited by Gen Agent Trust Hub on Jun 20, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- Command Execution: The skill executes local Node.js scripts and standard CLI tools (Azure CLI and Power Platform CLI) to facilitate environment management. These operations are standard for development and administrative workflows and are performed within the local project context.
- Network Operations: Connectivity is established with Microsoft Dataverse APIs and Microsoft Learn documentation. These interactions are necessary for verifying environment status and ensuring the agent operates with the latest technical guidance from official sources.
- State Tracking: The skill writes configuration and status markers to the local file system (e.g.,
docs/alm/last-force-link.json). This practice supports idempotent operations and provides a clear audit trail of administrative changes. - User Consent Gates: For operations described as destructive, such as moving an environment's pipeline host association, the skill implements mandatory manual confirmation steps. This ensures that significant changes are not performed without explicit user oversight.
- Data Ingestion Surface: The skill processes data from external API responses and CLI outputs. While this creates a potential surface for indirect prompt injection, the risk is addressed through structured data handling and the aforementioned confirmation gates.
Audit Metadata