skills/forcedotcom/sf-skills/service-itsm-agentic-setup-fulfiller-agent-configure/Gen Agent Trust Hub
service-itsm-agentic-setup-fulfiller-agent-configure
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill uses deterministic Node.js scripts (A9) for all JSON parsing and decision-making logic, ensuring that raw data is handled predictably and reducing the risk of indirect prompt injection from processed templates.
- [SAFE]: Secure authentication practices are strictly enforced; the instructions explicitly forbid extracting bearer tokens and require using the Salesforce CLI (
sf) to manage org sessions securely. - [SAFE]: The skill performs input sanitization on user-provided values (developer name and label) using double-quote escaping before they are interpolated into YAML scripts, mitigating potential injection risks.
- [SAFE]: Privacy is maintained through automated scrubbing of internal Salesforce record IDs from all user-facing reports and chat narratives.
- [SAFE]: Transient data and API response captures are managed within a dedicated scratch directory, separating sensitive raw data from final durable artifacts.
- [SAFE]: All operations are limited to official Salesforce CLI tools and Connect API endpoints, with no reliance on external, untrusted, or unverified remote resources.
Audit Metadata