rayfin-functions

Pass

Audited by Gen Agent Trust Hub on Nov 9, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • Command Execution: The skill instructs the agent to utilize CLI tools such as az (Azure CLI) and rayfin to fetch authentication tokens and documentation. This behavior is a standard part of the Microsoft Fabric development lifecycle and ensures that the agent can interact with necessary cloud resources.
  • External Resource Management: The instructions reference several Node.js packages under the @microsoft scope, including @microsoft/rayfin-guide and @microsoft/fabric-user-data-functions. These are vendor-owned dependencies used to provide the agent with local documentation and runtime context for code generation.
  • Security Best Practices: The skill specifically advises against hardcoding secrets or using deprecated methods for credential access. It promotes the use of ctx.Secrets and the rayfin secret set command, which are designed to keep sensitive information secure and managed outside of the source code.
  • Data Ingestion Surface: The agent is guided to read documentation files from local directories (node_modules) or retrieve them via CLI commands. While this introduces an interface for external content ingestion, the sources are restricted to trusted vendor-controlled paths, minimizing the risk of processing untrusted data.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 9, 2026, 03:12 PM