fabric-cli-powerbi

Pass

Audited by Gen Agent Trust Hub on Feb 23, 2026

Risk Level: SAFECOMMAND_EXECUTIONCREDENTIALS_UNSAFE
Full Analysis
  • Command Execution via Subprocess: The automation scripts (refresh_model.py, list_refresh_history.py, and rebind_report.py) use the subprocess module to interact with the fab CLI. This pattern is a standard method for wrapping command-line tools into scriptable actions, allowing the agent to perform complex management tasks programmatically.
  • Administrative Credential Management: Documentation in gateways.md and SKILL.md illustrates how to update data source credentials using the Power BI API. While the provided examples use placeholder credentials, they demonstrate the skill's capability to handle sensitive authentication data, which is necessary for data source maintenance.
  • Item Ownership and Permissions: The skill includes functionality for taking over semantic models and data sources. This is an administrative operation that changes item ownership within Power BI workspaces. It is a legitimate feature for maintaining access when owners change, though it requires appropriate workspace permissions to execute.
  • Data Ingestion and Indirect Processing: The Python scripts ingest and parse JSON data returned by the CLI (e.g., refresh history records and model details). This data is used to provide status updates and analysis. As the skill processes information from an external system, standard considerations for handling untrusted input apply when these outputs are used in downstream logic.
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 23, 2026, 05:16 PM