service-itsm-incident-mgmt-configure
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues detected. The skill follows best practices for administrative configuration tasks, including human-in-the-loop confirmation via the
AskUserQuestiontool before any state-changing operation is performed. - [SAFE]: The skill implements a robust 'read-before-write' pattern (Phase 3 and Phase 6) to ensure operations are idempotent and to verify that the server state matches the requested direction after execution.
- [SAFE]: All external domains and resources referenced in the documentation (e.g.,
api.salesforce.com,developer.salesforce.com) belong to the vendor's own infrastructure or well-known technology providers (e.g.,claude.ai,cursor.com). - [SAFE]: The skill uses a hosted MCP server (
headless-360) and correctly defines access requirements (CustomizeApplicationpermission) in its frontmatter to ensure it operates within an appropriate security context.
Audit Metadata