powerbi-visuais
Pass
Audited by Gen Agent Trust Hub on Oct 3, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: No malicious patterns or behaviors were identified. The skill is purely instructional and provides best practices for data visualization.
- [EXTERNAL_DOWNLOADS]: The skill references several external resources, including official Microsoft Learn documentation, the W3C SVG specification, and a vendor-owned utility tool (
backgroundbuilder.officetuning.com.br). All identified URLs are from well-known or vendor-controlled domains. - [DYNAMIC_EXECUTION]: The skill provides DAX code snippets designed to generate SVG and HTML content within Power BI. These are standard techniques for the target platform; the instructions include best practices for handling locale-specific formatting and acknowledge platform-level security constraints (such as the inability to execute JavaScript).
- [INDIRECT_PROMPT_INJECTION]: While the skill processes user queries to provide visualization advice, it does not ingest untrusted external data (such as web content or arbitrary files) that could lead to indirect injection attacks against the agent.
Audit Metadata