power-automate-mcp
Pass
Audited by Gen Agent Trust Hub on Apr 26, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill facilitates communication with the FlowStudio MCP server at
https://mcp.flowstudio.app/mcpto list, read, and manage Power Automate flows. This communication is essential for the skill's functionality and targets the vendor's official service endpoint. - [PROMPT_INJECTION]: The skill ingests and processes data from external Power Automate flow definitions and execution results, creating a surface for indirect prompt injection.
- Ingestion points: Data is retrieved from the Power Automate API via tools such as
get_live_flowandget_live_flow_run_action_outputs(documented in SKILL.md and references/tool-reference.md). - Boundary markers: The provided code examples do not include explicit boundary markers or instructions to ignore embedded commands in the retrieved data.
- Capability inventory: The skill has the ability to update flow definitions (
update_live_flow) and trigger or resubmit flow runs (trigger_live_flow,resubmit_live_flow_run). - Sanitization: No specific sanitization or validation of the retrieved flow content is shown in the provided code helpers.
Audit Metadata