power-bi-retail-analytics-dashboard
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires the user to clone a repository from an external, non-trusted source (github.com/MahbubNibir/power-bi-retail-analytics-viz.git) to acquire the dashboard and dataset files.
- [COMMAND_EXECUTION]: Installation steps include shell commands to clone the repository, extract datasets using tar or unzip, and launch the Power BI application via start or open.
- [DYNAMIC_EXECUTION]: The skill provides a Python script intended for execution within Power BI to perform K-means clustering on customer data using the pandas and scikit-learn libraries.
- [INDIRECT_PROMPT_INJECTION]: The skill defines a workflow that ingests data from local CSV files, SQL Server databases, and REST APIs (Ingestion points). There are no defined delimiters or instructions to prevent the agent from obeying instructions embedded in the data (Boundary markers). The skill environment has access to shell commands and Python execution (Capability inventory). No sanitization or filtering logic is specified for the external data sources (Sanitization).
Audit Metadata