power-apps-code-apps
Pass
Audited by Gen Agent Trust Hub on Feb 20, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS] (SAFE): The skill utilizes
npx degitto pull project templates from themicrosoftGitHub organization (microsoft/PowerAppsCodeApps). According to the [TRUST-SCOPE-RULE], downloads from this trusted organization are considered safe. - [COMMAND_EXECUTION] (SAFE): The skill requires the use of
pac(Power Platform CLI) andnpmfor project management, authentication, and deployment. These are the expected tools for the stated purpose of Power Platform development. - [DATA_EXPOSURE] (SAFE): While the skill manages authentication profiles and environment IDs via the CLI, it explicitly instructs the AI never to write custom authentication code, relying instead on the platform's managed host authentication.
- [PROMPT_INJECTION] (LOW): The 'Vibe Coding' feature involves processing natural language input to generate code. The skill includes a mandatory multi-step planning and approval workflow ('Plan Designer') which mitigates the risk of direct execution of untrusted instructions.
Audit Metadata