creating-fix-work-item
Pass
Audited by Gen Agent Trust Hub on Jun 23, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [SAFE]: No evidence of malicious behavior, obfuscation, or unauthorized data exfiltration was found. The skill follows standard procedures for Salesforce development using the sf CLI.
- [COMMAND_EXECUTION]: The skill uses the
sf data create recordcommand to create work items in the targeted Salesforce org. This is a legitimate and documented use of the tool within the skill's context. - [INDIRECT_PROMPT_INJECTION]: This category identifies the surface for potential manipulation through data ingested from external analysis.
- Ingestion points: Data for the
Subject,OwnerId, andDevopsProjectIdfields enter the agent's context from previous tool outputs or user-provided parameters. - Boundary markers: No explicit boundary markers or delimiters are used to wrap the interpolated variables in the command template.
- Capability inventory: The skill utilizes subprocess execution via the
sfCLI to perform data creation. - Sanitization: While no explicit input sanitization is mentioned, the skill implements a mandatory confirmation gate requiring the user to explicitly approve the subject, assignee, and project before the command is executed, effectively mitigating the risk of unauthorized or malicious actions.
Audit Metadata