service-omni-supervisor-surface-deploy
Pass
Audited by Gen Agent Trust Hub on Sep 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONREMOTE_CODE_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The
deploy-and-report.shscript executes thesfCLI andjqto manage Salesforce data. This is the primary function of the skill and uses standard tooling for Salesforce administrative tasks. - [DATA_EXFILTRATION]: The skill queries information from the Salesforce
Organization,OmniSupervisorConfig,OmniSupervisorConfigAction, andOmniSupervisorConfigTabobjects. This data remains within the agent's context and is emitted only to the user via JSON stdout. No external network requests are made to non-Salesforce domains. - [REMOTE_CODE_EXECUTION]: The Python test suite (
_bootstrap.py) usessubprocess.runto execute the shell script during unit testing. This is a standard development practice for validating script behavior in a controlled environment. - [DYNAMIC_EXECUTION]: The test harness dynamically creates a mock
sfexecutable in a temporary directory to simulate Salesforce API responses for testing purposes. This allows for safe, network-free verification of the skill's logic.
Audit Metadata