search-consumption-cli
Pass
Audited by Gen Agent Trust Hub on May 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- Standard Command Execution: The skill uses
az restto interact with Microsoft Fabric APIs. This is a standard method for authenticated CLI-based interactions with cloud services. - Temporary File Usage: It writes request payloads to
/tmp/body.json. This is a recommended practice to avoid shell quoting complexities and potential command injection vulnerabilities when handling user-provided search strings or filters. - Official API Interaction: All network requests are directed to official Microsoft endpoints (
api.fabric.microsoft.com). These operations are consistent with the skill's primary purpose of discovering Fabric items. - Version Verification Process: The skill includes an update check that uses
gitto fetch version information from its repository. This is a common pattern for CLI tools to ensure they are running the latest version with current security patches and features. - Input Limitations: The skill provides explicit guidance on supported filter syntax, which helps prevent malformed requests and ensures consistent API behavior.
Audit Metadata