databasehub-cli
Pass
Audited by Gen Agent Trust Hub on Nov 5, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- Command Execution Considerations: The skill provides templates for executing
az restandInvoke-RestMethodcommands to query inventory and health data fromapi.fabric.microsoft.com. While shell command execution is a sensitive capability, it is used here exclusively for authenticated, read-only API requests to established service endpoints within the Microsoft Fabric infrastructure.\n- Temporary File Management: For complex API requests, the skill generates temporary JSON files in the system's temp directory to store request bodies. This is a standard technique for handling complex shell input. The skill includes explicit cleanup logic usingRemove-Itemto ensure these temporary files do not persist on the user's system.\n- Access Control and Identity: The instructions emphasize the use of delegated Entra user tokens and explicitly advise against passing sensitive credentials or bearer tokens as command-line arguments. The skill also provides guidance on handling authorization errors (401/403) by identifying missing permissions rather than attempting to bypass security filters.\n- Operational Boundaries: The skill defines a strict read-only scope, providing clear instructions for the agent to decline any resource creation, modification, or deletion requests. This design minimizes the potential for unauthorized changes to the data estate and ensures the skill remains within its intended analysis-only purpose.
Audit Metadata