fabric-cli
Pass
Audited by Gen Agent Trust Hub on Apr 25, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses Python's
subprocess.runacross multiple scripts to interact with the Fabric environment through established CLI tools. Specifically, it invokesfabfor resource management,duckdbfor querying OneLake Delta tables,sqlcmdfor T-SQL operations, andazfor authentication and Azure resource management. These executions are core to the skill's functionality and use standard authentication mechanisms. - [EXTERNAL_DOWNLOADS]: Instructions are provided to install the
ms-fabric-cli(a Microsoft-owned tool) and thenb-cliutility (authored by the skill creator, data-goblin). These tools are required for the skill to operate and originate from legitimate repositories. - [DATA_EXFILTRATION]: Network operations are performed via
requestsandurllib.requestto talk to official Microsoft endpoints (api.fabric.microsoft.com,api.powerbi.com,onelake.dfs.fabric.microsoft.com). Data access is governed by the user's existing Azure session permissions, and the skill provides guidance on using Azure Key Vault for secure secret management.
Audit Metadata