service-itsm-agentic-setup-incident-management
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides legitimate functionality for configuring Salesforce Incident Management features. It uses established MCP tools to interact with the Salesforce API through a structured "Setup Operation Recipe" (SOR) protocol.
- [COMMAND_EXECUTION]: The skill executes data operations via the
headless-360MCP server. These operations are limited to the specific tasks of configuring ITSM features such as SLAs, Priority Matrices, and Persona assignments. - [INDIRECT_PROMPT_INJECTION]: While the skill processes user-supplied data to update configurations, it implements robust safeguards: it requires explicit user confirmation via
AskUserQuestionbefore any write operation and performs a live read-back after each change to verify the state, minimizing the risk of unauthorized modifications. - [PRIVILEGE_ESCALATION]: The skill includes instructions for "Service Management Privilege" configuration. Analysis confirms this is a standard business feature of Salesforce ITSM for managing employee service access levels and is not a malicious attempt to bypass system security controls.
Audit Metadata