generate-pcf-companion
Pass
Audited by Gen Agent Trust Hub on Aug 25, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [Command Execution]: The skill utilizes the
Bashtool to runpac pcf initandnpmcommands (install,run build). These are standard operations for creating and building Power Apps components and are consistent with the skill's stated purpose of local code generation. - [Platform Bridge Communication]: The instructions guide the generation of code that uses
window.PowerApps.NativeExtension.sendAsync. This is a documented, platform-specific API for communication between Power Apps components and native modules in the Power Apps Mobile environment. - [Input Ingestion]: The skill reads local files such as
manifest.jsonandPRD.mdto derive component properties and logic. It includes specific guidance on sanitizing manifest attributes, such as escaping XML characters and avoiding apostrophes to ensure compatibility with platform validation schemas. - [Trusted Documentation]: All external URL references point to official Microsoft documentation (learn.microsoft.com) or the Power Apps portal, providing context for the framework being used.
Audit Metadata