service-omni-queue-deploy

Pass

Audited by Gen Agent Trust Hub on Sep 6, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The script executes sf and jq commands to perform org metadata discovery and updates. These are standard developer tools for the target environment.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided identifiers and Salesforce metadata. It mitigates injection risks by validating the format of developer names using regex and applying XML entity escaping to user-supplied labels before metadata deployment.\n- [DYNAMIC_EXECUTION]: The script dynamically creates temporary XML metadata files for queue creation. This is a standard pattern for the Salesforce Metadata API and is handled securely through proper escaping and temporary directory management.\n- [SAFE]: A production environment check is implemented, querying the Organization object to ensure the script only modifies sandboxes, developer editions, or trial orgs, preventing accidental impact on production data.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 6, 2026, 09:34 AM
Security Audit — agent-trust-hub — service-omni-queue-deploy