service-omni-base-settings-configure
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements a 'safe_to_write' guard in
scripts/configure-and-report.shthat prevents accidental deployment to production environments by verifying org metadata (IsSandbox, TrialExpirationDate, OrganizationType) before proceeding. - [SAFE]: Data ingestion from the Salesforce Metadata API in
scripts/detect-existing.shis handled using strict regular expression parsing (grep -oE "<${name}>(true|false)</${name}>"), which effectively sanitizes the input and prevents indirect injection from the retrieved XML content. - [SAFE]: All operations are performed using standard, well-known Salesforce CLI tools (
sf) and basic shell utilities (jq,grep,sed). There is no evidence of unauthorized network access, data exfiltration, or persistence mechanisms.
Audit Metadata