powerbi-report-authoring
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- External Package Installation: The skill directs the user to install CLI tools from the
@microsoftscope using NPM. These packages are provided by a trusted organization and are necessary for the skill's core report authoring and validation functions. - Command Execution: To perform its tasks, the skill executes specialized CLI commands (
powerbi-report-authorandpowerbi-desktop). These tools are used to validate JSON schemas, manage report metadata, and interface with Power BI Desktop, representing the intended operational model of the skill. - File System Interaction: The skill facilitates the creation and modification of Power BI Project (PBIP) files, including report, page, and visual definitions. This access is restricted to the specific directory structures required for Power BI development.
- Data Processing Considerations: The skill ingests external specifications, such as design briefs and report templates. While this involves processing third-party content, the skill mitigates potential risks by mandating a validation step through the
powerbi-report-author validatecommand to confirm the structural and functional safety of the resulting report files.
Audit Metadata