skills/forcedotcom/sf-skills/service-digital-engagement-messaging-site-integrate/Gen Agent Trust Hub
service-digital-engagement-messaging-site-integrate
Pass
Audited by Gen Agent Trust Hub on Aug 28, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes site configuration metadata (such as
content.jsonandhomeGuestLayout.json) retrieved from a Salesforce org. This represents an indirect prompt injection surface as malicious content within these files could potentially influence the agent's behavior during patching or verification. - Ingestion points: Site metadata files retrieved via
sf project retrieve(specified inSKILL.md). - Boundary markers: Absent in the instructions.
- Capability inventory: Includes shell execution for patching scripts, metadata deployment via the Salesforce CLI (
sf project deploy), and network requests viacurlfor verification. - Sanitization: The skill uses
jqwith variable binding (--arg) to safely modify JSON content, which prevents shell-level injection during the patching process. - [DYNAMIC_EXECUTION]: The helper scripts
patch_lwr_bundle.shandpatch_aura_bundle.shinclude a fallback to dynamically execute a small Python snippet to generate UUIDs if theuuidgensystem utility is not available. - Evidence:
python3 -c 'import uuid; print(uuid.uuid4())'inscripts/patch_lwr_bundle.shandscripts/patch_aura_bundle.sh. - [COMMAND_EXECUTION]: The skill relies on executing shell scripts and various CLI tools (
sf,jq,curl) to perform its primary function of metadata manipulation and deployment. This is the intended purpose of the skill and is carried out using standard, authorized tools.
Audit Metadata