service-omni-sidebar-configure
Pass
Audited by Gen Agent Trust Hub on Sep 6, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
subprocess.runin its test suite (scripts/tests/_bootstrap.py) to execute a bash script for contract testing. This is a standard and safe testing practice where the environment is controlled and the execution targets a local script within the skill's own package. - [COMMAND_EXECUTION]: The primary logic in
scripts/enable-and-report.shutilizes standard Salesforce CLI commands (sf org display,sf data query,sf project deploy) to interact with the target environment. These commands are gated by an explicit validation step that ensures the target is a Sandbox or Developer Edition org before any modifications are attempted. - [SAFE]: The skill implements a robust 'safe_to_write' guard which queries the target Salesforce organization's metadata to verify it is not a production instance before proceeding with metadata deployments.
Audit Metadata