power-automate-mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited power-automate-mcp (Agent Skill) and scored it 96/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 1 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 1 flagged
The text {match} tells the agent to skip the normal "ask the user first" gate. Used adversarially it removes the human-in-the-loop check before destructive or sensitive actions, turning a normally-gated agent into a fire-and-forget executor.
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Use this skill when the user wants AI help with Microsoft Power Automate flows through the local MCP server and Chromium extension from this repository.
The extension is a passive capture and status surface. Do not ask the user to click extension buttons to make normal MCP work proceed. The AI should operate through MCP tools.
Provider notes live in references/providers.md.
doctor or get_context.connect_flow when the target is not already explicit.flowId, or a narrow nameQuery; if connect_flow returns candidates, choose by flowId or ask the user which flow is intended.get_flow before edits.preview_flow_update before saving.validate_flow before and after save when available.apply_flow_update only for the smallest intended change.get_last_update after save and summarize the review diff.revert_last_update if the saved result is wrong.doctorget_contextconnect_flow if neededget_flowlist_runs or get_latest_run if run history mattersget_run_actions when a run needs action-level triageUse solution write tools only for unmanaged solutions and only when adding cloud flows is the intended change.
doctorget_contextcanManageSolutions.available is true, or follow its reason before retrying.list_solutionslist_solution_components when a specific solution needs component inventory.list_environment_variables when environment variable definitions or current values matter.add_flow_to_solution for an existing flow, or create_flow_in_solution when a new blank flow should be created and added.doctorconnect_flowget_flowpreview_flow_updatevalidate_flowapply_flow_updateget_last_updatevalidate_flow again when availableUse only when the trigger is manual/request based and the payload is safe.
get_flowget_trigger_callback_urlinvoke_triggerwait_for_runget_runget_run_actionsget_contextdoctorconnect_flowlist_flowslist_solutionslist_solution_componentslist_environment_variablesadd_flow_to_solutionget_flowpreview_flow_updatevalidate_flowapply_flow_updateget_last_updaterevert_last_updatelist_runsget_latest_runget_runget_run_actionswait_for_runget_trigger_callback_urlinvoke_triggercreate_flowcreate_flow_in_solutionclone_flowLEGACY_TOKEN_MISSING: deeper flow-service operations need a compatible browser token. Focus or reopen a real flow page so the extension can capture it automatically.AUTHENTICATION_FAILED: the captured token was rejected for that endpoint. Reopen or focus the flow page and retry after capture.BAP_TOKEN_MISSING: solution inspection needs a Power Platform/BAP token. Open make.powerapps.com or make.powerautomate.com in the target environment with the extension enabled.DATAVERSE_TOKEN_MISSING: solution inspection needs a token for the Dataverse org. Open the Dataverse org or a model-driven app in that environment with the extension enabled.SCHEMA_VALIDATION_FAILED: fix the candidate flow JSON. If details include a rejected member such as retryPolicy, remove or relocate that field intentionally.CONNECTION_AUTHORIZATION_FAILED: stop retrying saves. The user must fix the named connector or connection permissions in Power Automate.FLOW_NOT_FOUND: call list_flows and connect_flow; browser-captured flows may still be usable even when the live catalog is stale.POWER_AUTOMATE_BRIDGE_PORT. Do not assume an unknown local process is safe to reuse.This MCP can perform real edits. Keep production work supervised, review diffs after save, and use staging flows whenever possible.
Solution writes are limited to add_flow_to_solution and create_flow_in_solution for unmanaged solutions. Do not invent or simulate unsupported write operations such as creating solutions, setting environment variable values, publishing customizations, deleting solution components, or deleting flows.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.