dataflows-save-as-authoring-cli
Pass
Audited by Gen Agent Trust Hub on May 7, 2026
Risk Level: SAFE
Full Analysis
- Official API and Tooling Integration: The skill utilizes the Azure CLI (
az rest) andjqto interact with official Microsoft Power BI and Fabric REST APIs. These interactions are scoped to the vendor's own infrastructure and follow established administrative patterns. - File Handling Practices: The instructions include writing temporary configuration files to
/tmp/save-as-body.jsonand generating local reports likereadiness-snapshot.json. These are standard practices for managing API payloads and session data locally. - Data Processing Considerations: The skill processes metadata from the user's tenant (such as workspace and dataflow names). While this represents a surface for indirect prompt injection, the skill uses structured JSON parsing (
jq) and targets trusted data sources, which significantly minimizes associated risks. - Credential Security: The skill leverages existing environment authentication (
az login) rather than requiring hardcoded secrets. It correctly instructs the agent to use specific resource audiences to ensure tokens are only transmitted to authorized Microsoft endpoints.
Audit Metadata