service-itsm-teams-configure
Pass
Audited by Gen Agent Trust Hub on Aug 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONPRIVILEGE_ESCALATIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the Bash tool and sf CLI to execute administrative commands, including metadata deployment and environment variable management, which are required for the integration setup.
- [PRIVILEGE_ESCALATION]: The skill automates the creation and assignment of permission sets (e.g., Teams_Employee_ApiAccess and MSTeamsSetupAutomationAccess) to grant the necessary API and automation permissions for the integration to function.
- [DYNAMIC_EXECUTION]: The skill generates Salesforce metadata files (e.g., AuthProvider and PermissionSet) from local templates at runtime and deploys them to the organization using the Salesforce CLI.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests user-supplied identifiers such as Azure Client IDs and Tenant IDs, which are interpolated into metadata templates and API payloads. While this provides a potential attack surface for data poisoning, the instructions emphasize secure handling and the skill is intended for authenticated administrative configuration.
Audit Metadata