service-omni-permission-set-assign

Pass

Audited by Gen Agent Trust Hub on Oct 15, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses the official Salesforce CLI (sf) and jq to interact with Salesforce organizations. All commands are constructed using validated arguments and standard practices.
  • [DYNAMIC_EXECUTION]: The script features a 'self-heal' mechanism that dynamically generates a Permission Set XML file. This generation is restricted to a set of hardcoded presence status names and is executed within a temporary file-system space before being deployed via the CLI.
  • [DATA_EXFILTRATION]: No unauthorized exfiltration patterns were identified. Network activity is limited to communication with Salesforce's official API endpoints through authenticated CLI sessions.
  • [PROMPT_INJECTION]: The skill instructions and metadata do not contain any patterns intended to bypass safety filters, override agent behavior, or extract system prompts.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 15, 2026, 08:02 PM