service-omni-sidebar-configure

Pass

Audited by Gen Agent Trust Hub on Sep 6, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses subprocess.run in its test suite (scripts/tests/_bootstrap.py) to execute a bash script for contract testing. This is a standard and safe testing practice where the environment is controlled and the execution targets a local script within the skill's own package.
  • [COMMAND_EXECUTION]: The primary logic in scripts/enable-and-report.sh utilizes standard Salesforce CLI commands (sf org display, sf data query, sf project deploy) to interact with the target environment. These commands are gated by an explicit validation step that ensures the target is a Sandbox or Developer Edition org before any modifications are attempted.
  • [SAFE]: The skill implements a robust 'safe_to_write' guard which queries the target Salesforce organization's metadata to verify it is not a production instance before proceeding with metadata deployments.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 6, 2026, 01:11 PM
Security Audit — agent-trust-hub — service-omni-sidebar-configure