setup-offline-profile
Pass
Audited by Gen Agent Trust Hub on Oct 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- Command Execution: The skill uses
bashandnodetools to run local scripts such ascheck-version.js,resolve-environment.js, anddataverse-request.js. These scripts are located within the plugin's own directory and are used to verify environment status and interact with Dataverse APIs. - Dynamic Execution and Loading: The skill performs dynamic loading of project files using
node -etorequiretheapp.config.jsfile from the current working directory. While this allows the agent to read project configuration, it assumes the local workspace content is trusted by the user. - Indirect Prompt Injection Surface: The skill ingests data from several project files, including
.datamodel-manifest.jsonandpower.config.json, which is then used to prompt an 'architect agent' to design the offline profile. - Ingestion points:
power.config.json,app.config.js,.datamodel-manifest.json, andmemory-bank.md. - Boundary markers: No explicit delimiter markers or instructions to ignore embedded commands are specified for the data ingestion phase.
- Capability inventory: The skill possesses capabilities for command execution (Bash), file system writes (Edit/Write), and network operations via the Dataverse API (POST/PATCH/DELETE).
- Sanitization: The instructions do not specify explicit sanitization or filtering of the content read from these project files.
- Network Interaction: The skill communicates with Dataverse environments (typically
*.crm.dynamics.com) using thedataverse-request.jsutility. This interaction is essential for creating and publishing Mobile Offline Profiles as part of the intended functionality.
Audit Metadata