service-catalog-template-coordinate
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFEPRIVILEGE_ESCALATIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [PRIVILEGE_ESCALATION]: The skill includes an access self-healing mechanism that can automatically assign the 'UnifiedCatalogAdmin' permission set and its associated license to the current user via the 'mcp__headless-360__dispatch' tool if a 403 error is encountered.
- [DYNAMIC_EXECUTION]: The skill does not use a hardcoded sequence of steps; instead, it 'discovers' and 'describes' setup recipes from the Salesforce platform at runtime to determine the correct operations, HTTP methods, and paths to execute.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external Salesforce records such as template descriptions and recipe steps. It mitigates potential injection risks by instructing the agent to treat this text strictly as data and by enforcing a mandatory SOQL quote-escaping rule for all user-supplied strings.
- [COMMAND_EXECUTION]: The skill uses MCP tools to dispatch GET, POST, PATCH, and DELETE requests to various Salesforce REST API endpoints to manage the Service Process lifecycle.
Audit Metadata