service-itsm-agentic-setup-cmdb-bundle-deploy

Pass

Audited by Gen Agent Trust Hub on Aug 14, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill uses official Salesforce Connect APIs through the headless-360 MCP server to manage CMDB deployments. All operations are scoped to the authenticated Salesforce org session.
  • [SAFE]: Implements a mandatory user confirmation step (Step 3) before performing the installation POST request, ensuring the user is aware of the target org and the content being deployed.
  • [SAFE]: The skill includes comprehensive logic to verify that the CMDB feature is enabled and that the running user has the necessary permissions (e.g., Type Manager) before proceeding with the installation.
  • [SAFE]: Instructions emphasize using authoritative data (resolving the version from the catalog) rather than hardcoded or guessed values, reducing the risk of accidental misconfiguration.
  • [SAFE]: No patterns of obfuscation, remote code execution, or unauthorized data access were detected. The skill's behavior aligns with its documented purpose.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 14, 2026, 12:16 PM
Security Audit — agent-trust-hub — service-itsm-agentic-setup-cmdb-bundle-deploy