service-omni-queue-deploy
Pass
Audited by Gen Agent Trust Hub on Sep 6, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The script executes
sfandjqcommands to perform org metadata discovery and updates. These are standard developer tools for the target environment.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided identifiers and Salesforce metadata. It mitigates injection risks by validating the format of developer names using regex and applying XML entity escaping to user-supplied labels before metadata deployment.\n- [DYNAMIC_EXECUTION]: The script dynamically creates temporary XML metadata files for queue creation. This is a standard pattern for the Salesforce Metadata API and is handled securely through proper escaping and temporary directory management.\n- [SAFE]: A production environment check is implemented, querying theOrganizationobject to ensure the script only modifies sandboxes, developer editions, or trial orgs, preventing accidental impact on production data.
Audit Metadata