audit-permissions

Pass

Audited by Gen Agent Trust Hub on Apr 18, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [Environment and CLI Interaction]: The skill uses the pac env who command to discover the Dataverse environment URL. This is a standard operation for Power Platform development tools to ensure analysis is performed against the correct environment.
  • [Dataverse API Interaction]: The skill performs network requests to *.crm.dynamics.com to query table metadata and relationships. These operations are conducted through deterministic Node.js scripts using secure bearer tokens provided by the platform's helper functions. This represents standard integration with a well-known service.
  • [Automated Reporting]: The skill generates a visual HTML audit report by interpolating analysis data into a pre-defined template. It uses a structured JSON-to-HTML rendering process which minimizes risks associated with dynamic content generation.
  • [Tool Chaining]: For remediation, the skill can hand off findings to another specialized agent (table-permissions-architect). This modular approach uses the standard Agent tool to decompose complex tasks while maintaining user oversight through an AskUserQuestion checkpoint.
  • [Project Analysis]: The skill performs local analysis of site configuration files and source code using Grep and Glob. This is necessary for the audit to detect missing or over-privileged permissions relative to the actual code implementation.
  • [Dynamic Context Verification]: A version check script is executed at load time to ensure the plugin is up to date. This is a benign maintenance pattern used to ensure compatibility and security within the development environment.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 18, 2026, 11:10 AM