Microsoft Dataverse plugin for coding agents, covering record CRUD, bulk data operations, advanced queries, schema and metadata, administration, security, environment management, and solution lifecycle through MCP, CLI, and SDK workflows.
- Stars
- 253
- Version
- v1
- Copies
- 0
Overview
Waxell's checks found 11 findings to review, highest severity high.
- Highest severity
- high
- Findings
- 11
- What ran
- Static analysis
A clean result means nothing alarming in what is published, not a guarantee. How the checks work
Skills in this plugin
- dv-adminMicrosoftEnvironment-level Dataverse administration: bulk delete, retention/archival, organization settings, OrgDB settings, recycle bin, audit,… No issuesEngineeringData & analytics253
- dv-connectMicrosoftOne-step setup and connection diagnostics for a Dataverse environment, installs tools, authenticates, registers MCP, writes `.env`, and… Review findingsEngineeringFinance253
- dv-dataMicrosoftRecord-level CRUD and bulk operations: create, update, delete, upsert, CSV import, multi-table foreign-key loads, AI-generated sample… No issuesData & analyticsEngineering253
- dv-metadataMicrosoftDataverse schema authoring and inspection: tables, columns, relationships, forms, and views. Use when the user wants to define, evolve, or… No issuesDocumentsEngineering253
- dv-overviewMicrosoftFoundational cross-cutting context for Dataverse / Power Platform work, scope and the skill map, the tool-capability reference, the safety… No issuesData & analyticsEngineering253
- dv-queryMicrosoftBulk reads, multi-page iteration, and analytics over Dataverse data. Use when the user wants to read, list, filter, aggregate, group,… Review findingsData & analyticsEngineering253
- dv-securityMicrosoftSecurity-role assignment, user access, application users, business units, and admin self-elevation in Dataverse environments. Use when the… No issuesSecurityEngineering253
- dv-solutionMicrosoftDataverse solution lifecycle: create, export, import, promote across environments, and validate deployments. Use when the user wants to… No issuesEngineering253
- erp-xppMicrosoftX++ code development lifecycle for Finance and Operations, scaffold models, author classes, custom services/APIs, and data entities,… No issuesEngineeringData & analytics253
We don't republish the plugin's instructions. Read them on GitHub at the reviewed commit.
Security
Security scan
Checked 2 days ago
Result
Review findings Waxell's checks found 11 findings to review, highest severity high.
Checked with static analysis: servers it launches, packages it installs at runtime, scripts piped to a shell and bundled binaries. Nothing was run. How the checks work
Findings (11)
high · 9
- high
Tells Claude to install unpinned packages (azure-identity, flush=True)
scripts/auth.py:694 · skill_risk:S2
- high
Tells Claude to install unpinned packages (deps, needed)
scripts/auth.py:1237 · skill_risk:S2
- high
Tells Claude to install unpinned packages (azure-identity, requests, PowerPlatform-Dataverse-Client, pandas, msal, msal-extensions)
skills/dv-connect/SKILL.md:61 · skill_risk:S2
- high
Tells Claude to install unpinned packages (@microsoft/dataverse@latest)
skills/dv-connect/SKILL.md:68 · skill_risk:S2
- high
Tells Claude to install unpinned packages (azure-identity, requests, PowerPlatform-Dataverse-Client, pandas, msal, msal-extensions)
skills/dv-connect/references/headless-hosts.md:78 · skill_risk:S2
- high
Tells Claude to install unpinned packages (@microsoft/dataverse@latest)
skills/dv-connect/references/tools-setup.md:15 · skill_risk:S2
- high
Tells Claude to install unpinned packages (azure-identity, requests, PowerPlatform-Dataverse-Client, pandas, msal, msal-extensions)
skills/dv-connect/references/tools-setup.md:51 · skill_risk:S2
- high
Tells Claude to install unpinned packages (or, needed, for, data, reads)
skills/dv-query/SKILL.md:12 · skill_risk:S2
- high
Tells Claude to install unpinned packages (PowerPlatform-Dataverse-Client, pandas, matplotlib, seaborn, azure-identity)
skills/dv-query/references/jupyter-setup.md:43 · skill_risk:S2
info · 2
- info
assets/dataverse-logo-256.png: PNG image
assets/dataverse-logo-256.png · binary_risk:B6
- info
assets/dataverse-logo-48.png: PNG image
assets/dataverse-logo-48.png · binary_risk:B6
Versions
Version history
Each distinct content we have seen, newest first, with the verdict it got at the time.
One version so far: v1 (1.17.0), seen 2026-11-03.
Files
Files
47 files, 480 KB in total. Names only; open them on GitHub.
- .claude-plugin/plugin.json
- .codex-plugin/plugin.json
- .cursor-plugin/plugin.json
- .github/plugin/plugin.json
- assets/dataverse-logo-256.png
- assets/dataverse-logo-48.png
- assets/dataverse-logo.svg
- gemini-extension.json
- plugin.json
- scripts/auth.py
- scripts/enable-mcp-client.py
- skills/dv-admin/SKILL.md
- skills/dv-admin/references/erp-batch.md
- skills/dv-admin/references/orgdb-settings.md
- skills/dv-admin/references/recycle-bin.md
- skills/dv-admin/references/settings-overrides.md
- skills/dv-connect/SKILL.md
- skills/dv-connect/references/erp-detection.md
- skills/dv-connect/references/headless-hosts.md
- skills/dv-connect/references/helper-scripts.md
- skills/dv-connect/references/mcp-configuration.md
- skills/dv-connect/references/tools-setup.md
- skills/dv-data/SKILL.md
- skills/dv-data/references/erp-writes.md
- skills/dv-data/references/multi-table-fk-import.md
- skills/dv-data/references/sample-data-generation.md
- skills/dv-metadata/SKILL.md
- skills/dv-metadata/references/alternate-keys.md
- skills/dv-metadata/references/forms-and-views.md
- skills/dv-metadata/references/metadata-propagation.md
- skills/dv-overview/SKILL.md
- skills/dv-overview/references/erp-target.md
- skills/dv-overview/references/windows-scripting.md
- skills/dv-query/SKILL.md
- skills/dv-query/references/erp-reads.md
- skills/dv-query/references/jupyter-setup.md
- skills/dv-query/references/querybuilder.md
- skills/dv-query/references/web-api-advanced.md
- skills/dv-security/SKILL.md
- skills/dv-solution/SKILL.md
- skills/erp-xpp/SKILL.md
- skills/erp-xpp/references/authoring.md
- skills/erp-xpp/references/commands.md
- skills/erp-xpp/references/validation.md
- skills/erp-xpp/references/workflows.md
- templates/CLAUDE.md
- templates/deploy.yml
See and control which skills your people use
Inside your organization, Waxell scans each skill and plugin before anyone installs it, approves what passes and publishes it to a private marketplace, and puts every MCP tool call behind one governed URL.
30 minutes. No commitment.
SOC 2 Type II attested · ISO/IEC 27001:2022 certified · HIPAA with a BAA · aligned to the EU AI Act and NIST AI RMF
More engineering skills and plugins
- dv-adminMicrosoftEnvironment-level Dataverse administration: bulk delete, retention/archival, organization settings, OrgDB settings, recycle bin, audit,… No issuesEngineeringData & analytics253
- dv-connectMicrosoftOne-step setup and connection diagnostics for a Dataverse environment, installs tools, authenticates, registers MCP, writes `.env`, and… Review findingsEngineeringFinance253
- dv-solutionMicrosoftDataverse solution lifecycle: create, export, import, promote across environments, and validate deployments. Use when the user wants to… No issuesEngineering253
- erp-xppMicrosoftX++ code development lifecycle for Finance and Operations, scaffold models, author classes, custom services/APIs, and data entities,… No issuesEngineeringData & analytics253