Skill audit report

connect-pbid Audit report.

TOM and ADOMD.NET guidance via PowerShell for connecting to Power BI Desktop's local Analysis Services instance. Covers model enumeration, DAX queries, metadata modification, annotations, calendar definitions, field parameters, query tracing, DAX library package management (daxlib.org), and the Desktop Bridge for reloading and screenshotting the report canvas. Automatically invoke when the user mentions "Power BI Desktop", "Analysis Services port", "TOM", "ADOMD", "daxlib", "DAX library", "DAX UDF package", or asks to "connect to PBI Desktop", "query PBI Desktop with DAX", "modify PBI Desktop model", "add a measure to PBI", "capture visual queries", "create a field parameter", "validate DAX", "intercept DAX queries", "install daxlib", "add DAX SVG", "add IBCS", "reload the report canvas", "screenshot a report page", "Desktop Bridge", or to work with the model and report in Power BI Desktop together.

BLOCKED · BLOCKNeeds reviewGenerated Nov 5, 2026Heuristic metadata audit
74
Audit
64
Trust
73
Quality
70
Security
88
Maintain
92
Install

OpenAgentSkill Trust Score

64
Manual review

OpenAgentSkill Trust Score

The Trust Score helps an agent decide whether a skill is safe enough to shortlist before installation.

GitHub adoption

INFO

76

894 GitHub stars

Stars/forks activity

INFO

71

894 stars, 131 forks; issue activity unavailable in current metadata

Recent maintenance

PASS

88

3mo since push

License clarity

PASS

86

GPL-3.0

README/SKILL.md completeness

PASS

86

Metadata includes enough usage and workflow context

Dependency/runtime risk

FAIL

38

command execution surface, credential or environment access

Install availability

PASS

92

npx skills add data-goblin/power-bi-agentic-development --skill connect-pbid

Install command safety

PASS

92

standard package or runtime install path

Permission surface

FAIL

18

secrets or environment access, shell or command execution

Repository evidence

PASS

86

https://github.com/data-goblin/power-bi-agentic-development/tree/main/plugins/pbi-desktop/skills/connect-pbid

Review status

INFO

66

AI review data available

Agent Proven outcomes

INFO

54

No agent outcome data yet

Checks

Install and adoption review

7 Passed · 13 Needs review

Install path

92

PASS

npx skills add data-goblin/power-bi-agentic-development --skill connect-pbid

Repository

88

PASS

https://github.com/data-goblin/power-bi-agentic-development/tree/main/plugins/pbi-desktop/skills/connect-pbid

License

86

PASS

GPL-3.0

Maintenance

88

PASS

3mo since push

AI review

55

CHECK

The skill relies on PowerShell and TOM/ADOMD.NET, which may not be pre-installed on all systems; setup requirements are not fully detailed in the excerpt.

README/SKILL.md completeness

86

PASS

Usable description available

Dependency risk

38

FIX

command execution surface, credential or environment access

Install command safety

92

PASS

standard package or runtime install path

Permission surface

18

FIX

secrets or environment access, shell or command execution

Stars/forks activity

71

CHECK

894 stars, 131 forks; issue activity unavailable in current metadata

Adoption

88

PASS

894 GitHub stars

Warnings

  • Dependency or permission surface needs review
  • Permission surface may require sandboxing
  • The skill relies on PowerShell and TOM/ADOMD.NET, which may not be pre-installed on all systems; setup requirements are not fully detailed in the excerpt.
  • The description is extremely long and includes many trigger phrases, which could cause the skill to activate in contexts where it is not needed.
  • The skill references external tools (pbir CLI, other skills) that are not part of this submission, which may cause confusion if those are not available.
  • Quality score needs review
  • Permission surface needs review: secrets or environment access, shell or command execution
  • Dependency/runtime risk: command execution surface, credential or environment access
  • Permission surface: secrets or environment access, shell or command execution

Method

This report combines public metadata, AI review output, repository freshness, install readiness, OpenAgentSkill events, quality scoring, trust checks, and the agent safety gate. It is not a full source-code security review.

Compare nearby options

Related skills to audit next