activate-site
Pass
Audited by Gen Agent Trust Hub on Mar 12, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- Command Execution: The skill utilizes the Power Platform CLI (
pac) and Azure CLI (az) to verify environment status and manage authentication. These operations are essential for the site activation process.\n- Secure Authentication: Credentials are not stored within the skill; instead, it relies on tokens acquired through the user's existing Azure CLI session. This ensures that permissions are managed through official identity providers.\n- Input Handling and Confirmation: Parameters are read from local configuration files (powerpages.config.json). The skill includes a dedicated confirmation step usingAskUserQuestion, requiring the user to verify all settings before the activation request is transmitted.\n- Indirect Prompt Injection Surface: Data ingested from local files is used in the provisioning process. The skill manages this surface by presenting the extracted information (Ingestion point: powerpages.config.json) to the user for approval (Boundary marker: Phase 3 confirmation), while maintaining a capability inventory of API and CLI interactions and relying on script-based argument handling for data sanitization.
Audit Metadata