skills/forcedotcom/sf-skills/implementing-ui-bundle-agentforce-conversation-client/Gen Agent Trust Hub
implementing-ui-bundle-agentforce-conversation-client
Pass
Audited by Gen Agent Trust Hub on May 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill manages dependencies from the official Salesforce organization, specifically the
@salesforce/ui-bundle-template-feature-react-agentforce-conversation-clientand@salesforce/agentforce-conversation-clientpackages. - [SAFE]: A regex validation rule is enforced for the
agentIdparameter (^0Xx[a-zA-Z0-9]{15}$), ensuring that only valid Salesforce identifiers are used. - [SAFE]: Visual customization is restricted to a strictly defined list of
styleTokens, which prevents the use of arbitrary CSS, inline styles, or external stylesheets that could introduce security risks. - [SAFE]: The documentation provides responsible security guidance, advising users to remove local development domains from the 'Trusted Domains for Inline Frames' list once development is complete.
Audit Metadata