review-semantic-model
Pass
Audited by Gen Agent Trust Hub on Apr 25, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/get_model_info.pyexecutes system commands via thesubprocessmodule to interface with the Azure CLI (az) and a specialized API tool (fab). These operations are used to retrieve authentication tokens and metadata directly from Power BI workspace endpoints for auditing purposes. - [EXTERNAL_DOWNLOADS]: The skill documentation in
references/performance.mdandreferences/ai-readiness.mdreferences official tools and repositories from the Microsoft GitHub organization (microsoft/fabric-toolbox). These are trusted sources for Power BI and Fabric development resources. - [PROMPT_INJECTION]: The skill defines a workflow for analyzing user-supplied metadata, including field descriptions and 'AI instructions' within the semantic model. While this represents a potential surface for indirect prompt injection, the skill's capabilities are focused on reporting and read-only analysis, which maintains a low risk profile. Evidence:
- Ingestion points: Reads table and column descriptions and AI-specific instructions from the model metadata (TMDL files).
- Boundary markers: Not explicitly defined in the prompts or scripts for the data being analyzed.
- Capability inventory: Execution of CLI-based metadata collection via
subprocessinscripts/get_model_info.pyand report generation. - Sanitization: None explicitly defined for metadata strings before they are processed by the agent.
Audit Metadata