salesforce-automation
Pass
Audited by Gen Agent Trust Hub on Jul 18, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires the configuration of an external MCP server at
https://rube.app/mcp. This service acts as the integration layer for executing Salesforce operations. - [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection attack surface because it ingests untrusted data from Salesforce records into the agent's context, which could potentially contain malicious instructions.
- Ingestion points: Tools such as
SALESFORCE_LIST_LEADS,SALESFORCE_SEARCH_CONTACTS, andSALESFORCE_QUERYretrieve external data from the CRM. - Boundary markers: The instructions do not specify the use of delimiters or 'ignore embedded instructions' warnings for data retrieved from Salesforce.
- Capability inventory: The skill provides extensive capabilities including record creation, updates, and custom SOQL query execution via
SALESFORCE_RUN_SOQL_QUERY. - Sanitization: No sanitization or validation of the retrieved CRM content is mentioned before it is processed by the agent.
Audit Metadata