The Agent Skills Directory

[COMMAND_EXECUTION]: The script scripts/deploy-and-report.sh executes several commands using the Salesforce CLI (sf) and jq. It queries org information to enforce a safety guard, uses sf project deploy start and sf project deploy report to manage metadata deployment, and uses sf project retrieve start to verify the deployment success. All variables used in shell commands are properly quoted to prevent unexpected execution.- [COMMAND_INJECTION]: The script implements input validation for the channel_developer_name argument using a regular expression (^[A-Za-z][A-Za-z0-9_]{0,79}$) before interpolating it into a sed command and subsequent XML files. This prevents malicious payloads from being injected into the shell command or the deployed metadata.- [PRIVILEGE_ESCALATION]: The skill includes a "safe to write" check that queries the target Salesforce organization's type. It blocks deployment if the organization is identified as a production environment (not a sandbox, trial, or developer edition), which prevents accidental or unauthorized modifications to production systems.- [DATA_EXPOSURE]: The skill interacts with Salesforce metadata and organization settings to perform its stated purpose. It does not handle sensitive user credentials, hardcode secrets, or exfiltrate data to external domains.

service-omni-presence-status-deploy