Skills
Navigate
skills/forcedotcom/sf-skills/service-itsm-agentic-setup-cmdb-bundle-deploy/Gen Agent Trust Hub

service-itsm-agentic-setup-cmdb-bundle-deploy

Pass

Audited by Gen Agent Trust Hub on Sep 19, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses mcp__headless-360__dispatch to perform administrative operations (bundle installation) on a Salesforce org. This is the intended purpose of the skill and is protected by explicit user confirmation and platform-level permission checks (ITSrvcsCnfgMgmnt permission).
  • [EXTERNAL_DOWNLOADS]: The skill retrieves bundle information from Salesforce Connect APIs. These are official platform endpoints managed by the vendor.
  • [PROMPT_INJECTION]: The instructions are clearly defined and do not contain any patterns attempting to bypass safety guardrails or override agent behavior maliciously.
  • [PRIVILEGE_ESCALATION]: The skill correctly identifies missing permissions and routes the user to a separate, controlled process for access assignment rather than attempting to bypass restrictions.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 19, 2026, 05:34 PM
Security Audit — agent-trust-hub — service-itsm-agentic-setup-cmdb-bundle-deploy