salesforce-incident-runbook
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues were detected within the skill content or instructions.
- [EXTERNAL_DOWNLOADS]: Fetches real-time service status information from Salesforce's official status API (
api.status.salesforce.com). This targets a well-known service for legitimate diagnostic purposes. - [COMMAND_EXECUTION]: Employs standard Salesforce CLI (
sf) commands to display organizational limits, check connection status, and list system logs. These are routine administrative operations essential for Salesforce incident management. - [INDIRECT_PROMPT_INJECTION]: The skill ingests external data from the Salesforce Status API and organizational logs.
- Ingestion points: Outputs from
curlstatus checks andsf apex logcommands. - Boundary markers: None explicitly defined in the provided bash snippets.
- Capability inventory: Limited to read-only diagnostic commands and standard Salesforce CLI operations.
- Sanitization: Not explicitly present for the status API responses, though the source is a trusted service provider.
Audit Metadata