list-connections

Pass

Audited by Gen Agent Trust Hub on Nov 9, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • Command Execution: The skill interacts with the Power Apps CLI through the Bash tool to list and create connections. This is a core part of its functionality for Power Platform developers.
  • External Package Dependency: The instructions specify using npx --no-install pa to run the CLI, which involves executing a package from a registry. This is a common pattern for running developer tools.
  • Indirect Prompt Injection Surface: The skill processes output from external CLI commands, which represents a potential surface for indirect prompt injection.
  • Ingestion points: The agent ingests output from pa connection list in SKILL.md.
  • Boundary markers: No specific delimiters or safety instructions are used to wrap the interpolated CLI output.
  • Capability inventory: The skill relies on the Bash tool for all its operations.
  • Sanitization: The output is processed directly without specific sanitization or validation steps.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 9, 2026, 08:40 AM