deploying-omnistudio-datapacks
Pass
Audited by Gen Agent Trust Hub on Jul 29, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references the vlocity package, which is downloaded from the official npm registry, a well-known and trusted service.
- [COMMAND_EXECUTION]: The skill executes standard vlocity CLI commands to perform DataPack operations like deployment and export. These commands are necessary for the skill's intended purpose.
- [REMOTE_CODE_EXECUTION]: The skill uses npx to execute the vlocity package directly from the npm registry. Since npm is a well-known service, this is considered a safe operational pattern for this workflow.
- [PROMPT_INJECTION]: The skill ingests DataPack JSON and job YAML files for processing via the CLI.
- Ingestion points: DataPack artifacts and job configuration files (SKILL.md)
- Boundary markers: None explicitly defined
- Capability inventory: Subprocess execution of the vlocity CLI tool (SKILL.md)
- Sanitization: Data is processed by the established vlocity CLI parser.
Audit Metadata