dataflows-cli

Pass

Audited by Gen Agent Trust Hub on Aug 9, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • Standard Tool Execution: The skill utilizes common command-line utilities such as az rest, curl, jq, base64, and uuidgen to interact with Microsoft Fabric and Power BI APIs. These tools are used for their intended administrative purposes.
  • Trusted API Interaction: All network requests are directed toward official Microsoft and Fabric domains, such as api.fabric.microsoft.com, api.powerbi.com, and analysis.windows.net. These are established cloud service endpoints.
  • Internal Scripting for Visualization: The skill includes local Python scripts (bar_chart.py, line_chart.py) to render data results as ASCII charts in the console. These scripts are dependency-free, using only the Python standard library, and process data locally.
  • Credential Security: The skill explicitly instructs the agent and the user to avoid hardcoding or rendering plaintext secrets. It encourages the use of passwordReference for Azure Key Vault, aligning with enterprise security standards for secret management.
  • Workflow Guardrails: Instructions are included to enforce read-only boundaries in consumption mode and generation boundaries during upgrades, preventing accidental modifications or incorrect API usage.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 9, 2026, 08:57 AM
Security Audit — agent-trust-hub — dataflows-cli