skills/forcedotcom/sf-skills/agentforce-wizard-ui-forecasting-analytics-components-configure/Gen Agent Trust Hub
agentforce-wizard-ui-forecasting-analytics-components-configure
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from the Salesforce organization via the
load-tuner-metadataoperation, which retrieves Opportunity custom fields and picklist values. This content is used to inform thesave-tuner-metadataconfiguration process. The instructions do not specify explicit boundary markers or sanitization for these metadata fields before they are processed by the agent. - [DYNAMIC_EXECUTION]: The
save-tuner-metadataoperation involves the internal re-serialization and deserialization of thepredictionConfigobject by the backend controller. The skill documentation instructs the agent to manually format certain fields as JSON-encoded strings (e.g.,excludedFields) to ensure successful deserialization into the internal prediction-config object.
Audit Metadata