service-concierge-portal-generate
Warn
Audited by Socket on Oct 16, 2026
1 alert found:
AnomalyAnomalyreferences/portal-deploy-runbook.md
LOWAnomalyLOW
references/portal-deploy-runbook.md
This fragment documents Salesforce portal provisioning and bot-routing operations, including deployment and publication of remote configuration. It explicitly weakens clickjacking, Locker Service, and CSP protections to support Concierge chat, creating a significant security concern if used beyond the stated need; shell and query interpolation also warrants careful input control. No credential theft, unrelated network exfiltration, or malicious payload is evident in the shown portion. Severity: security alert for the security-posture changes, but the fragment does not provide evidence of malware.
Confidence: 94%Severity: 68%
Audit Metadata