audit-permissions
Pass
Audited by Gen Agent Trust Hub on Apr 18, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [Environment and CLI Interaction]: The skill uses the
pac env whocommand to discover the Dataverse environment URL. This is a standard operation for Power Platform development tools to ensure analysis is performed against the correct environment. - [Dataverse API Interaction]: The skill performs network requests to
*.crm.dynamics.comto query table metadata and relationships. These operations are conducted through deterministic Node.js scripts using secure bearer tokens provided by the platform's helper functions. This represents standard integration with a well-known service. - [Automated Reporting]: The skill generates a visual HTML audit report by interpolating analysis data into a pre-defined template. It uses a structured JSON-to-HTML rendering process which minimizes risks associated with dynamic content generation.
- [Tool Chaining]: For remediation, the skill can hand off findings to another specialized agent (
table-permissions-architect). This modular approach uses the standardAgenttool to decompose complex tasks while maintaining user oversight through anAskUserQuestioncheckpoint. - [Project Analysis]: The skill performs local analysis of site configuration files and source code using
GrepandGlob. This is necessary for the audit to detect missing or over-privileged permissions relative to the actual code implementation. - [Dynamic Context Verification]: A version check script is executed at load time to ensure the plugin is up to date. This is a benign maintenance pattern used to ensure compatibility and security within the development environment.
Audit Metadata