service-de-channel-routing-configure

Pass

Audited by Gen Agent Trust Hub on Sep 19, 2026

Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes the Salesforce CLI (sf), Node.js, and Python 3 to perform administrative operations, including querying org configuration and updating record fields such as SessionHandlerId and FallbackQueueId.
  • [DYNAMIC_EXECUTION]: The skill dynamically scaffolds a temporary Salesforce DX project containing Queue and QueueRoutingConfig XML metadata and deploys it using sf project deploy.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests user input for IDs and metadata labels which are interpolated into SOQL queries and XML templates. Ingestion points: User-provided {CHANNEL_ID} and metadata display names. Boundary markers: None. Capability inventory: Record updates (sf data update), metadata deployment (sf project deploy), and file writing in /tmp. Sanitization: Implements logic to slugify and validate metadata API names from user-provided labels.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 19, 2026, 05:35 PM