preview-offline-scope

Pass

Audited by Gen Agent Trust Hub on Oct 10, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • Standard Tool and Script Execution: The skill uses Bash and node to execute local scripts (resolve-environment.js, verify-offline-profile.js, dataverse-request.js). These tools are used within the scope of the skill's intended diagnostic purpose—verifying environmental configurations and retrieving metadata for estimation. The allowed-tools list in the YAML frontmatter correctly scopes these activities to standard development operations.
  • Data Access for Estimation: It performs read-only GET requests to a resolved Dataverse environment URL (<envUrl>) to retrieve record counts ($count=true&$top=0). These queries are used to build a data usage report for the developer and do not involve sensitive data exfiltration or unauthorized access, as they rely on the environment context provided by the user.
  • Diagnostic Nature: The skill is explicitly marked as read-only and non-mutating. Its primary function is to compute heuristics based on field types (e.g., String, Integer) and sync intervals to help developers avoid performance issues before deployment. This behavior is consistent with professional software development workflows.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 10, 2026, 08:03 AM