setup-pipeline

Pass

Audited by Gen Agent Trust Hub on Jun 23, 2026

Risk Level: SAFE
Full Analysis
  • External Content Integration: The skill retrieves the latest Power Platform documentation from Microsoft Learn to guide the setup process in Phase 1.5. This allows the agent to adapt to recent platform updates.
  • Ingestion points: Official documentation via the microsoft_docs_fetch tool and local project manifest files.
  • Boundary markers: The skill processes this information as background context for its configuration logic.
  • Capability inventory: The skill uses standard tools for file management (Write, Edit) and environment interaction (Bash, Dataverse APIs).
  • Sanitization: Content is sourced directly from well-known official Microsoft domains.
  • Credential Management: To interact with the Power Platform, the skill acquires temporary access tokens through the Azure CLI (az account get-access-token). These tokens are used locally to authenticate OData API calls to the user's specified host environment, following standard security practices for administrative tasks.
  • Environment Security Settings: In Phase 4.4, the skill identifies potential deployment obstacles, such as environment-level blocks on specific file extensions. It handles these through a dedicated consent gate, ensuring no changes to environment-level security policies occur without explicit user approval.
  • Standard Tooling Usage: The workflow relies on the Power Platform CLI (pac) and Git to detect project state and version control the resulting configuration. These operations are transparent and intended to integrate with existing developer workflows.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 23, 2026, 01:08 PM
Security Audit — agent-trust-hub — setup-pipeline