The Agent Skills Directory

Indirect Prompt Injection Surface: The skill processes and acts upon data retrieved from the Microsoft Fabric REST API, which constitutes an external data ingestion surface.
Ingestion points: The skill fetches workspace metadata, item definitions, and topology information via az rest calls to api.fabric.microsoft.com across both authoring and consumption modes.
Boundary markers: While the skill uses clear procedural instructions and mode boundaries, it does not consistently apply explicit delimiters to segregate all external API outputs from its internal logic.
Capability inventory: The skill possesses the capability to perform network requests, modify resource states in the cloud, and write to temporary local files for command assembly.
Sanitization: It mitigates risk by using structured parsing tools such as jq, ConvertFrom-Json, and JMESPath to filter and extract only expected fields from API responses.
Dynamic Execution Patterns: The skill dynamically generates PowerShell scripts and JSON payloads based on user input and API data to facilitate Eventstream configuration.
Description: This script generation is a standard function of the skill's administrative purpose but involves assembling executable command strings at runtime.
Context: The generated code is primarily used to interact with official vendor APIs (api.fabric.microsoft.com) and manages local state through temporary files.
Sensitive Data Handling Considerations: The skill provides instructions for retrieving connection strings and access keys for Custom Endpoint sources.
Security Safeguards: The instructions explicitly mandate that the agent must obtain user confirmation before retrieving secrets and advises the redaction of primary and secondary keys from any displayed output unless securely requested by the user.

eventstream-cli