field-service-voice-to-form-configure
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is designed for Salesforce administrators to configure the 'Voice to Form' feature on Field Service Mobile. It follows a structured, idempotent setup process.
- [COMMAND_EXECUTION]: The skill explicitly disclaims the use of shell commands, local scripts (Python, Node.js), or CLI tools (sf). It relies exclusively on the platform's REST dispatch mechanism for all operations.
- [DATA_EXFILTRATION]: No evidence of data exfiltration was found. All network operations are targeted at the connected Salesforce instance's official REST API endpoints (/services/data/vXX.0/).
- [INDIRECT_PROMPT_INJECTION]: The skill handles potential injection surfaces by using parameterized SOQL queries (bind variables) when filtering based on user-supplied technician identifiers. It reads org metadata (Permission Sets, Flow names) but does not execute instructions found within that data.
- [PRIVILEGE_ESCALATION]: While the skill modifies permissions within the Salesforce org, these are authorized administrative actions required for the feature's functionality. It follows a 'least privilege' approach by creating a specific custom permission set instead of cloning broad system permissions.
- [DYNAMIC_EXECUTION]: The skill uses a browser-based automation tool (browser MCP) to toggle a UI-only flag ('LLM Targetable') in Flow Builder where no API exists. This interaction is narrowly scoped to specific Flow Builder elements and navigate to system-managed URLs.
Audit Metadata