skills/forcedotcom/sf-skills/service-itsm-agentic-setup-itsm-agentforce-permset-assign/Gen Agent Trust Hub
service-itsm-agentic-setup-itsm-agentforce-permset-assign
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the Salesforce CLI (
sf) and Node.js (node) to perform operational tasks. These commands are constrained to querying organization metadata and assigning permission sets to users within the authenticated Salesforce environment. - [DATA_EXFILTRATION]: No patterns of data exfiltration were detected. The skill interacts exclusively with the Salesforce API through the
sfCLI and does not initiate network connections to unauthorized external domains. - [PROMPT_INJECTION]: The skill does not contain instructions that attempt to bypass safety filters, override system prompts, or elicit restricted information. The instructions are focused on providing administrative setup for ITSM Fulfiller agents.
- [OBFUSCATION]: Analysis of all skill files and scripts revealed no evidence of obfuscation techniques, including Base64 encoding, zero-width characters, or homoglyph-based attacks.
- [PRIVILEGE_ESCALATION]: There are no attempts to perform local privilege escalation or acquire unauthorized system access. All operations are performed within the security context of the user's Salesforce CLI session.
Audit Metadata