skills/forcedotcom/sf-skills/service-itsm-agentic-setup-agentforce-studio-configure/Gen Agent Trust Hub
service-itsm-agentic-setup-agentforce-studio-configure
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill follows security best practices by explicitly prohibiting the extraction of sensitive access tokens, instead relying on the Salesforce CLI's internal session management.
- [SAFE]: A mandatory user confirmation checkpoint is implemented via AskUserQuestion before any write operations are executed, ensuring user oversight for organizational changes.
- [COMMAND_EXECUTION]: Shell commands are restricted to the Salesforce CLI (sf) and Node.js for executing local utility scripts. These are standard tools for the skill's intended purpose of Salesforce administration.
- [SAFE]: The logic for feature classification and enablement planning is offloaded to standalone Node.js scripts. This ensures deterministic processing of API responses and prevents potential prompt injection or misinterpretation of data by the agent.
Audit Metadata