Skills
skills/forcedotcom/afv-library/managing-suite-assignments/Gen Agent Trust Hub

managing-suite-assignments

Pass

Audited by Gen Agent Trust Hub on Jun 23, 2026

Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes the sf api request rest command to interact with Salesforce Connect APIs for managing test suite assignments. This is restricted to the specific task of pipeline configuration and targets a user-specified Salesforce organization.
  • [PROMPT_INJECTION]: The skill processes external inputs to build API request bodies, creating a surface for indirect prompt injection.
  • Ingestion points: Data enters via testSuiteId, testSuiteName, and testSuiteOperations variables in SKILL.md.
  • Boundary markers: Explicit confirmation gates and impact preview tables are required before any execution in all operational modes.
  • Capability inventory: Modifies remote state via POST requests to the testSuiteStages endpoint using the Salesforce CLI.
  • Sanitization: Relies on user verification of the re-presented configuration data before committing changes.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 23, 2026, 08:29 PM
Security Audit — agent-trust-hub — managing-suite-assignments