service-catalog-template-coordinate
Pass
Audited by Gen Agent Trust Hub on Sep 2, 2026
Risk Level: SAFEPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [PRIVILEGE_ESCALATION]: The skill implements a self-healing access mechanism that automatically assigns the 'UnifiedCatalogAdmin' permission set and its associated license to the running user if they encounter an access denial when reading catalog data.
- [INDIRECT_PROMPT_INJECTION]: The skill processes template and recipe content retrieved from the org environment. It includes defensive instructions to treat all such content as data rather than instructions, and requires the agent to escape user-supplied strings before embedding them in SOQL queries to prevent injection attacks.
- [SAFE]: The skill operates entirely within the platform's API environment using authenticated sessions. No external script execution, obfuscation, or unauthorized data exfiltration patterns were detected.
Audit Metadata