preview-offline-scope
Pass
Audited by Gen Agent Trust Hub on Oct 10, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- Standard Tool and Script Execution: The skill uses
Bashandnodeto execute local scripts (resolve-environment.js,verify-offline-profile.js,dataverse-request.js). These tools are used within the scope of the skill's intended diagnostic purpose—verifying environmental configurations and retrieving metadata for estimation. Theallowed-toolslist in the YAML frontmatter correctly scopes these activities to standard development operations. - Data Access for Estimation: It performs read-only
GETrequests to a resolved Dataverse environment URL (<envUrl>) to retrieve record counts ($count=true&$top=0). These queries are used to build a data usage report for the developer and do not involve sensitive data exfiltration or unauthorized access, as they rely on the environment context provided by the user. - Diagnostic Nature: The skill is explicitly marked as read-only and non-mutating. Its primary function is to compute heuristics based on field types (e.g., String, Integer) and sync intervals to help developers avoid performance issues before deployment. This behavior is consistent with professional software development workflows.
Audit Metadata