skills/forcedotcom/sf-skills/service-itsm-agentic-setup-agentforce-studio-validate/Gen Agent Trust Hub
service-itsm-agentic-setup-agentforce-studio-validate
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes Salesforce CLI (
sf) commands through Bash to interact with the Salesforce Connect API. This is the intended functionality for validating organizational feature toggles. - [DYNAMIC_EXECUTION]: A bundled Node.js script (
scripts/classify-readiness.mjs) is executed to process the JSON output from the Salesforce CLI. The script performs deterministic classification of the environment's readiness based on API responses. - [INDIRECT_PROMPT_INJECTION]: The skill processes external data retrieved from the Salesforce API. The use of a standalone script for parsing and classification serves as a mitigation against potential instructions embedded in API responses, as the agent relies on the script's structured output rather than raw response interpretation.
Audit Metadata