dataverse-web-resources

Pass

Audited by Gen Agent Trust Hub on Feb 20, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE] (SAFE): No malicious patterns, obfuscation, or prompt injection attempts were detected across the skill files.
  • [COMMAND_EXECUTION] (SAFE): The skill provides PowerShell snippets for automating the deployment of web resources to Dataverse environments. These scripts are functional utilities for the stated purpose and do not perform unauthorized file access or exfiltration.
  • [EXTERNAL_DOWNLOADS] (SAFE): Instructions include installing vite-plugin-singlefile via npm. This is a standard and well-known development dependency used to bundle React applications into single HTML files for Dataverse compatibility.
  • [DATA_EXPOSURE] (SAFE): While the skill involves accessing Dataverse record data via the Xrm.WebApi and parent.Xrm objects, this is the primary intended function of the skill. The provided HTML templates use .textContent for data binding, which is a best practice for preventing Cross-Site Scripting (XSS).
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 20, 2026, 10:29 PM