service-itsm-teams-configure
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONCREDENTIALS_UNSAFEEXTERNAL_DOWNLOADSDYNAMIC_CONTEXT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes bash commands (prefixed with
!) to manage file permissions usingumask, write sensitive credentials to temporary local files, and execute Salesforce CLI (sf) commands for deploying metadata to the organization. - [DYNAMIC_EXECUTION]: The skill dynamically generates and deploys Salesforce metadata files, specifically
.authprovider-meta.xmland.permissionset-meta.xml, to configure authentication and user permissions required for the integration. - [CREDENTIALS_UNSAFE]: The skill involves the collection and use of Microsoft Entra Client Secrets. It mitigates the risk of credential exposure by providing specific instructions to store these secrets in a local, gitignored file instead of pasting them directly into the chat, and includes commands to ensure the values are not recorded in logs.
- [EXTERNAL_DOWNLOADS]: The skill references and interacts with well-known services, including
login.microsoftonline.comfor OAuth authentication and Microsoft Graph API endpoints, which are standard for this integration use case. - [DYNAMIC_CONTEXT_INJECTION]: The skill employs the
!command syntax to execute shell operations at runtime, enabling the agent to persist setup data and credentials locally during the configuration workflow.
Audit Metadata