setup-offline-profile

Pass

Audited by Gen Agent Trust Hub on Oct 10, 2026

Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • Command Execution: The skill uses bash and node tools to run local scripts such as check-version.js, resolve-environment.js, and dataverse-request.js. These scripts are located within the plugin's own directory and are used to verify environment status and interact with Dataverse APIs.
  • Dynamic Execution and Loading: The skill performs dynamic loading of project files using node -e to require the app.config.js file from the current working directory. While this allows the agent to read project configuration, it assumes the local workspace content is trusted by the user.
  • Indirect Prompt Injection Surface: The skill ingests data from several project files, including .datamodel-manifest.json and power.config.json, which is then used to prompt an 'architect agent' to design the offline profile.
  • Ingestion points: power.config.json, app.config.js, .datamodel-manifest.json, and memory-bank.md.
  • Boundary markers: No explicit delimiter markers or instructions to ignore embedded commands are specified for the data ingestion phase.
  • Capability inventory: The skill possesses capabilities for command execution (Bash), file system writes (Edit/Write), and network operations via the Dataverse API (POST/PATCH/DELETE).
  • Sanitization: The instructions do not specify explicit sanitization or filtering of the content read from these project files.
  • Network Interaction: The skill communicates with Dataverse environments (typically *.crm.dynamics.com) using the dataverse-request.js utility. This interaction is essential for creating and publishing Mobile Offline Profiles as part of the intended functionality.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 10, 2026, 08:04 AM