dynamics-webapi
Pass
Audited by Gen Agent Trust Hub on Jun 29, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The helper scripts execute the Azure CLI ('az') to acquire authentication tokens when local credentials are missing or expired. This is a standard and documented behavior for interacting with Azure services and is implemented using secure argument passing.
- [CREDENTIALS_UNSAFE]: The skill accesses authentication tokens stored in local files such as '
/.dynamics/token.json' and '/.OpenDataverse/'. This is necessary for the skill's primary function of maintaining persistent access to the WebAPI without repeated logins. - [SAFE]: The skill enforces a read-only policy by only implementing HTTP GET requests for all entity and metadata interactions, preventing unauthorized modification of remote data.
- [SAFE]: URL construction includes normalization and encoding of user-provided paths and query parameters, which helps mitigate risks associated with malformed or malicious API paths.
Audit Metadata