fabric-cli
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [External Package Execution]: The instructions involve the use of
npx fabric-app-data, which downloads and executes a package to manage data connections. As this targets official Microsoft utilities for Fabric integration, it represents a standard interaction within the vendor's ecosystem. - [Command Execution]: The skill documentation includes commands for performing DAX queries against semantic models. This capability is necessary for the skill's primary function of data management and allows users to retrieve information through the Fabric SDK pipeline.
- [Configuration Management]: The skill manages environment-specific data in a
fabric.yamlfile. It correctly advises developers to add the resulting generated TypeScript files to.gitignore, which is a recommended security practice to prevent local environment details from being inadvertently committed to public repositories.
Audit Metadata