deploying-omnistudio-datapacks
Pass
Audited by Gen Agent Trust Hub on May 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: The skill is authored by the official Salesforce organization (forcedotcom) and facilitates the use of official Vlocity and Salesforce CLI tools. All operations described are consistent with legitimate administrative and development workflows for OmniStudio.
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install the
vlocityCLI via npm (npm install --global vlocity). This is a well-known, vendor-provided tool required for the skill's primary function and originates from a trusted source. - [COMMAND_EXECUTION]: The skill provides various commands for exporting, deploying, and validating DataPacks. These commands use established tools (
vlocity,sf) and parameters (-sfdx.username) that leverage standard Salesforce authentication mechanisms. - [DATA_EXPOSURE]: While the skill processes external DataPack files (JSON), which represents a theoretical surface for indirect prompt injection, it uses specialized CLI tooling for the actual data processing, and the instructions are scoped to legitimate configuration management tasks.
Audit Metadata