connecting-agent-data-library
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill defines a subagent action,
Answer_Questions_with_KBAs, which ingests user-provided text through theInput:User_Queryvariable. This input is interpolated into a prompt template to perform knowledge retrieval and response generation, creating a surface where untrusted data can influence agent behavior. - Ingestion points:
Input:User_Queryinput parameter for theAnswer_Questions_with_KBAsaction inSKILL.md. - Boundary markers: The subagent instructions include constraints such as "Never provide generic information unless retrieved from knowledge articles," though no technical delimiters or explicit "ignore instructions" warnings for the interpolated data are specified.
- Capability inventory: The skill uses the
generatePromptResponsecapability to search data libraries and generate displayable output for the user. - Sanitization: No specific input sanitization, filtering, or escaping mechanisms are described for the user query before it is processed by the model.
- [COMMAND_EXECUTION]: The documentation includes several examples of the
sf(Salesforce CLI) utility for project management tasks, such assf project retrieve start,sf agent validate,sf agent preview,sf agent publish, andsf agent activate. These are standard administrative commands for the Salesforce platform and are used appropriately for the skill's documented purpose of agent configuration and deployment.
Audit Metadata