setup-pipeline
Pass
Audited by Gen Agent Trust Hub on Jun 23, 2026
Risk Level: SAFE
Full Analysis
- External Content Integration: The skill retrieves the latest Power Platform documentation from Microsoft Learn to guide the setup process in Phase 1.5. This allows the agent to adapt to recent platform updates.
- Ingestion points: Official documentation via the
microsoft_docs_fetchtool and local project manifest files. - Boundary markers: The skill processes this information as background context for its configuration logic.
- Capability inventory: The skill uses standard tools for file management (
Write,Edit) and environment interaction (Bash, Dataverse APIs). - Sanitization: Content is sourced directly from well-known official Microsoft domains.
- Credential Management: To interact with the Power Platform, the skill acquires temporary access tokens through the Azure CLI (
az account get-access-token). These tokens are used locally to authenticate OData API calls to the user's specified host environment, following standard security practices for administrative tasks. - Environment Security Settings: In Phase 4.4, the skill identifies potential deployment obstacles, such as environment-level blocks on specific file extensions. It handles these through a dedicated consent gate, ensuring no changes to environment-level security policies occur without explicit user approval.
- Standard Tooling Usage: The workflow relies on the Power Platform CLI (
pac) and Git to detect project state and version control the resulting configuration. These operations are transparent and intended to integrate with existing developer workflows.
Audit Metadata