activate-site

Pass

Audited by Gen Agent Trust Hub on Mar 12, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • Command Execution: The skill utilizes the Power Platform CLI (pac) and Azure CLI (az) to verify environment status and manage authentication. These operations are essential for the site activation process.\n- Secure Authentication: Credentials are not stored within the skill; instead, it relies on tokens acquired through the user's existing Azure CLI session. This ensures that permissions are managed through official identity providers.\n- Input Handling and Confirmation: Parameters are read from local configuration files (powerpages.config.json). The skill includes a dedicated confirmation step using AskUserQuestion, requiring the user to verify all settings before the activation request is transmitted.\n- Indirect Prompt Injection Surface: Data ingested from local files is used in the provisioning process. The skill manages this surface by presenting the extracted information (Ingestion point: powerpages.config.json) to the user for approval (Boundary marker: Phase 3 confirmation), while maintaining a capability inventory of API and CLI interactions and relying on script-based argument handling for data sanitization.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 12, 2026, 10:29 AM