skills/forcedotcom/sf-skills/service-digital-engagement-messaging-site-integrate/Gen Agent Trust Hub
service-digital-engagement-messaging-site-integrate
Pass
Audited by Gen Agent Trust Hub on Jul 31, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local shell scripts (
scripts/detect_bundle_type.sh,scripts/patch_lwr_bundle.sh,scripts/patch_aura_bundle.sh) to automate metadata patching and bundle detection based on the site type (LWR or Aura). - [COMMAND_EXECUTION]: Utilizes the Salesforce CLI (
sf) to perform metadata retrieval, deployment, data querying for network IDs, and community publishing. - [EXTERNAL_DOWNLOADS]: Uses
curlto perform an HTTP status code check against the public URL of the Experience Cloud site to verify that the messaging widget is accessible to guest users. - [SAFE]: Implements idempotent patching of JSON metadata using
jqwith parameter binding (--arg), which prevents injection attacks by treating user-supplied coordinates as strings during the modification of site configuration files. - [SAFE]: Securely generates unique identifiers for new site components using standard system utilities (
uuidgen) or the Pythonuuidmodule.
Audit Metadata