service-omni-presence-status-deploy
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the official Salesforce CLI (
sf) andjqfor organization metadata management. All commands use validated inputs to prevent shell injection. - [PROMPT_INJECTION]: No prompt injection vulnerabilities were detected. Input parameters are validated against strict regex patterns or fixed case-statement lists.
- [DATA_EXFILTRATION]: No data exfiltration was detected. The skill only interacts with the authenticated Salesforce organization to query and deploy metadata related to its core functionality.
- [DYNAMIC_EXECUTION]: The script dynamically generates temporary metadata files using
sed. The injected variable${BOUND_CHANNEL_DN}is validated against a strict regex (^[A-Za-z][A-Za-z0-9_]{0,79}$) that matches Salesforce DeveloperName rules, preventing command or XML injection. - [PRIVILEGE_ESCALATION]: The script includes a 'safe_to_write' guard that queries the target organization's type to prevent accidental deployments to production environments.
Audit Metadata