service-itsm-agentic-setup-cmdb-access-assign
Pass
Audited by Gen Agent Trust Hub on Aug 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements robust administrative controls including mandatory user confirmation for write operations and environment state validation before any changes are made.
- [COMMAND_EXECUTION]: Instructions are provided to construct SOQL (Salesforce Object Query Language) queries for user resolution; these include explicit requirements for the agent to escape user-provided strings to mitigate potential injection risks.
- [EXTERNAL_DOWNLOADS]: The skill utilizes an authorized, vendor-hosted MCP server ('headless-360') for all network communication with Salesforce APIs, ensuring interactions occur over authenticated channels.
- [SAFE]: Idempotency is maintained by checking existing permissions and licenses before performing assignments, preventing redundant or erroneous write operations.
Audit Metadata