The Agent Skills Directory

Command Execution Pattern: The skill utilizes the subprocess module to execute local commands. This includes calling the Azure CLI (az) to acquire authentication tokens and using the webbrowser module to open Fabric task details pages. These actions are scoped to specific, well-known system tools and internal scripts, facilitating the skill's integration with the Microsoft Fabric environment.- Credential Management: The skill manages authentication by storing temporary tokens in a local directory (.dataprojects/auth/). It implements security controls by verifying that token files are protected with restrictive file permissions (chmod 600), which ensures that only the current user can access the credentials.- Indirect Prompt Injection Surface: The skill ingests user-supplied outcomes and external Lakehouse URLs to generate task instructions. While this represents a potential surface for indirect prompt injection, the skill employs structured handoff contracts and instruction-length checks to maintain clear boundaries between user data and execution plans.- Network Operations: The skill performs network requests to official Microsoft service domains, such as api.fabric.microsoft.com and onelake.dfs.fabric.microsoft.com. It includes validation logic to verify that portal URLs and API origins belong to trusted Microsoft Fabric or Power BI infrastructure before transmitting authentication headers.

project-osmos