service-omni-routing-flow-deploy
Pass
Audited by Gen Agent Trust Hub on Sep 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
sfCLI andjqtool to manage Salesforce metadata and records. It executes commands to query organization details, deploy Flow components, and perform CRUD operations on test records (such asCaseorVoiceCall) to verify routing logic at runtime. - [DYNAMIC_EXECUTION]: The
deploy-and-report.shscript generates Flow XML files dynamically by resolving organization-specific tokens (e.g., Queue IDs, Service Channel IDs) and substituting them into local templates. This mechanism is the core functionality for ensuring metadata portability across different Salesforce environments and follows standard DevOps practices for Salesforce deployment. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from the target Salesforce organization via CLI queries. To protect the integrity of the deployed metadata, the script employs dedicated sanitization routines (
xml_escapeandsed_repl_escape) to ensure that retrieved values cannot corrupt the XML structure or introduce unintended logic during token substitution.
Audit Metadata