list-connections
Pass
Audited by Gen Agent Trust Hub on Nov 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- Command Execution: The skill interacts with the Power Apps CLI through the
Bashtool to list and create connections. This is a core part of its functionality for Power Platform developers. - External Package Dependency: The instructions specify using
npx --no-install pato run the CLI, which involves executing a package from a registry. This is a common pattern for running developer tools. - Indirect Prompt Injection Surface: The skill processes output from external CLI commands, which represents a potential surface for indirect prompt injection.
- Ingestion points: The agent ingests output from
pa connection listin SKILL.md. - Boundary markers: No specific delimiters or safety instructions are used to wrap the interpolated CLI output.
- Capability inventory: The skill relies on the
Bashtool for all its operations. - Sanitization: The output is processed directly without specific sanitization or validation steps.
Audit Metadata