setup-solution
Pass
Audited by Gen Agent Trust Hub on Jun 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- Local Command Execution: The skill frequently uses the
Bashtool to execute Node.js scripts located within its own package (e.g.,check-alm-plan.js,verify-alm-prerequisites.js). These scripts are used to perform complex logic, validate project state, and interact with Dataverse APIs. This is a standard pattern for advanced agent capabilities. - External Documentation Grounding: The skill uses
microsoft_docs_fetchto retrieve content fromlearn.microsoft.com. This information is used to ensure the skill remains aligned with the latest Power Platform ALM practices. As this targets a well-known and trusted service, it is considered a safe operational practice. - User Confirmation Gates: Several critical operations, such as creating a permanent publisher prefix or adding components to a solution, are gated behind
AskUserQuestion. This ensures the user maintains control over irreversible changes to their environment. - Dataverse API Interaction: The skill orchestrates requests to Dataverse OData endpoints using authenticated tokens. This access is necessary for the skill's purpose of managing Power Platform solutions and is handled through local scripts that manage authentication via the PAC and Azure CLIs.
- Temporary Data Handling: The skill uses inline Node.js commands to write temporary JSON files (e.g.,
.solutions-batch.json). This is used to pass structured data between different phases and scripts, ensuring data integrity during complex multi-step processes.
Audit Metadata