service-itsm-agentic-setup-cmdb-bundle-deploy
Pass
Audited by Gen Agent Trust Hub on Aug 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill uses official Salesforce Connect APIs through the
headless-360MCP server to manage CMDB deployments. All operations are scoped to the authenticated Salesforce org session. - [SAFE]: Implements a mandatory user confirmation step (Step 3) before performing the installation POST request, ensuring the user is aware of the target org and the content being deployed.
- [SAFE]: The skill includes comprehensive logic to verify that the CMDB feature is enabled and that the running user has the necessary permissions (e.g., Type Manager) before proceeding with the installation.
- [SAFE]: Instructions emphasize using authoritative data (resolving the version from the catalog) rather than hardcoded or guessed values, reducing the risk of accidental misconfiguration.
- [SAFE]: No patterns of obfuscation, remote code execution, or unauthorized data access were detected. The skill's behavior aligns with its documented purpose.
Audit Metadata