skills/microsoft/power-platform-skills/setup-offline-profile/Snyk

setup-offline-profile

Warn

Audited by Snyk on Jul 29, 2026

Risk Level: MEDIUM

Full Analysis

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

Third-party content exposure detected (medium risk: 0.30). Source: Step 3.5c/3.5d in SKILL.md where user-provided free-text is collected via “AskUserQuestion” (name/description and per-table column selection) and then used to generate Dataverse payloads, so outsider-authored free text enters the runtime workflow.

Issues (1)

W011

MEDIUM

Third-party content exposure detected (indirect prompt injection risk).

Audit Metadata

Risk Level

MEDIUM

Analyzed

Jul 29, 2026, 03:31 AM

Issues

1

Security Audit — snyk — setup-offline-profile