service-itsm-swarming-configure
Pass
Audited by Gen Agent Trust Hub on Aug 27, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill defines a standard administrative workflow for enabling and configuring Salesforce Swarming features. All operations are conducted via the headless-360 toolset targeting official Salesforce API endpoints such as /services/data/v67.0/connect/setup/discovery/features/status.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests external data from Salesforce API responses to determine its execution path. Ingestion points: Step 1 and Step 4 retrieve status information and organization settings from the Salesforce Connect API. Boundary markers: The skill does not use specific delimiters for API response data within its internal logic. Capability inventory: The skill uses mcp__headless-360__dispatch to perform state-changing POST and PATCH operations on Salesforce configuration endpoints. Sanitization: The skill performs explicit equality checks against known string constants such as 'ENABLED' and 'Teams' to control the workflow, effectively limiting the influence of external data.
Audit Metadata