semantic-model-authoring

Pass

Audited by Gen Agent Trust Hub on Oct 13, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • External Package Dependency: The skill's manifest (apm.yml) specifies the installation and execution of the @microsoft/powerbi-modeling-mcp package via npx. This package provides the Model Context Protocol (MCP) server necessary for the skill to interact with and author semantic models.
  • Network and API Operations: The skill relies heavily on the az rest command to communicate with the api.fabric.microsoft.com and api.powerbi.com service endpoints. These operations are used for model lifecycle management, including metadata discovery, definition updates, and data refresh triggers. The workflows include telemetry headers to track these operations.
  • Command Execution Surface: The skill generates and executes shell commands primarily via az rest for service interaction. It also facilitates the execution of DAX queries against semantic models for validation and performance diagnostic purposes.
  • Indirect Prompt Injection Surface: The skill is designed to ingest and process metadata from external semantic models, including table names, column descriptions, and measure definitions. As with any system that processes data from external sources, this represents a potential surface for indirect prompt injection if the metadata were to contain instructions intended to influence the agent. The skill includes detailed modeling and naming guidelines to help maintain data consistency.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 13, 2026, 10:47 AM