sales-agentforce-pipeline-management-configure
Pass
Audited by Gen Agent Trust Hub on Aug 7, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the sf CLI, curl, and python3 to automate complex configuration tasks within a Salesforce environment. These operations are restricted to the authenticated Salesforce instance and are used for their intended administrative purposes, such as enabling Einstein GenAI features, deploying flows, and configuring prompt templates.
- [DATA_EXFILTRATION]: Authentication tokens are retrieved via official sf CLI commands and used solely for API requests to Salesforce-owned domains. The skill includes a dedicated utility (scripts/shared/soap.sh) to redact sensitive tokens from its output logs, preventing accidental credential exposure.
- [SAFE]: No evidence of obfuscation or malicious code was found. The skill employs secure coding practices, such as using xml.sax.saxutils.escape in its Python scripts to ensure XML integrity when dynamically substituting field values into prompt templates. All operations are aligned with the skill's primary purpose and origin from a trusted vendor.
Audit Metadata