plan-alm
Pass
Audited by Gen Agent Trust Hub on Aug 1, 2026
Risk Level: SAFE
Full Analysis
- Environment and Authentication: The skill utilizes
pac(Power Platform CLI) andaz(Azure CLI) to determine environment context and obtain necessary tokens for metadata discovery. These are standard vendor-provided tools for managing Power Platform resources. - Local Content Generation: The ALM plan and its underlying data are stored locally within the project's
docs/directory, ensuring no sensitive configuration data is sent to external services. The generated HTML provides a visual summary for user review before any deployment actions are taken. - Safe Rendering Practices: The included
render-alm-plan.jsscript implements HTML escaping when processing site settings and component names, which protects the resulting report against potential injection from data retrieved from the environment. - Interactive Governance: Key lifecycle decisions, such as deployment strategy and final plan approval, are managed through interactive prompts, ensuring the user maintains control over the configuration and deployment path.
Audit Metadata