service-omni-supervisor-surface-deploy

Pass

Audited by Gen Agent Trust Hub on Sep 6, 2026

Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONREMOTE_CODE_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The deploy-and-report.sh script executes the sf CLI and jq to manage Salesforce data. This is the primary function of the skill and uses standard tooling for Salesforce administrative tasks.
  • [DATA_EXFILTRATION]: The skill queries information from the Salesforce Organization, OmniSupervisorConfig, OmniSupervisorConfigAction, and OmniSupervisorConfigTab objects. This data remains within the agent's context and is emitted only to the user via JSON stdout. No external network requests are made to non-Salesforce domains.
  • [REMOTE_CODE_EXECUTION]: The Python test suite (_bootstrap.py) uses subprocess.run to execute the shell script during unit testing. This is a standard development practice for validating script behavior in a controlled environment.
  • [DYNAMIC_EXECUTION]: The test harness dynamically creates a mock sf executable in a temporary directory to simulate Salesforce API responses for testing purposes. This allows for safe, network-free verification of the skill's logic.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 6, 2026, 01:11 PM
Security Audit — agent-trust-hub — service-omni-supervisor-surface-deploy