field-service-setup-orchestrator-get
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill is entirely instructional and does not contain any scripts, executables, or hardcoded credentials. It functions as a routing layer for other Salesforce-specific skills.- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user input to decide which sub-workflow to trigger. Ingestion points: User intent described in Phase 1. Boundary markers: The skill requires a mandatory Phase 1 confirmation question ('always ask a brief confirmation question — never skip this step') which acts as a human-in-the-loop checkpoint. Capability inventory: The skill only delegates to predefined internal sub-skills (e.g., sfs-foundation-setup-designer) and explicitly forbids direct interaction with object creation tools. Sanitization: None, but risk is mitigated by the restricted delegation list and confirmation requirement.
Audit Metadata