service-email-to-case-configure
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses 'subprocess.run' in 'scripts/apply-casesettings.py' and standard piping in 'scripts/check-agent-email-capability.sh' to execute the Salesforce CLI ('sf'). This is the intended behavior for authenticating and managing Salesforce org metadata.
- [DYNAMIC_EXECUTION]: The test bootstrap script 'scripts/tests/_bootstrap.py' uses 'importlib.util' to dynamically load internal scripts for unit testing. This is a legitimate implementation to support the testing of scripts with hyphenated names.
- [SAFE]: The skill implements protective measures, including a production safety gate in 'apply-casesettings.py' that requires explicit confirmation before modifying production environments, and a dedicated validation script 'scripts/validate-casesettings.py' to ensure configuration integrity.
Audit Metadata