semantic-model-authoring
Pass
Audited by Gen Agent Trust Hub on Oct 13, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- External Package Dependency: The skill's manifest (
apm.yml) specifies the installation and execution of the@microsoft/powerbi-modeling-mcppackage vianpx. This package provides the Model Context Protocol (MCP) server necessary for the skill to interact with and author semantic models. - Network and API Operations: The skill relies heavily on the
az restcommand to communicate with theapi.fabric.microsoft.comandapi.powerbi.comservice endpoints. These operations are used for model lifecycle management, including metadata discovery, definition updates, and data refresh triggers. The workflows include telemetry headers to track these operations. - Command Execution Surface: The skill generates and executes shell commands primarily via
az restfor service interaction. It also facilitates the execution of DAX queries against semantic models for validation and performance diagnostic purposes. - Indirect Prompt Injection Surface: The skill is designed to ingest and process metadata from external semantic models, including table names, column descriptions, and measure definitions. As with any system that processes data from external sources, this represents a potential surface for indirect prompt injection if the metadata were to contain instructions intended to influence the agent. The skill includes detailed modeling and naming guidelines to help maintain data consistency.
Audit Metadata