plan-alm

Pass

Audited by Gen Agent Trust Hub on Aug 1, 2026

Risk Level: SAFE
Full Analysis
  • Environment and Authentication: The skill utilizes pac (Power Platform CLI) and az (Azure CLI) to determine environment context and obtain necessary tokens for metadata discovery. These are standard vendor-provided tools for managing Power Platform resources.
  • Local Content Generation: The ALM plan and its underlying data are stored locally within the project's docs/ directory, ensuring no sensitive configuration data is sent to external services. The generated HTML provides a visual summary for user review before any deployment actions are taken.
  • Safe Rendering Practices: The included render-alm-plan.js script implements HTML escaping when processing site settings and component names, which protects the resulting report against potential injection from data retrieved from the environment.
  • Interactive Governance: Key lifecycle decisions, such as deployment strategy and final plan approval, are managed through interactive prompts, ensuring the user maintains control over the configuration and deployment path.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 1, 2026, 03:27 AM
Security Audit — agent-trust-hub — plan-alm