service-itsm-incident-priority-configure

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes the sf CLI to perform administrative tasks within a Salesforce environment. This includes executing authenticated REST requests, querying the Tooling API, and performing metadata deployments. All operations are scoped to the user's authenticated target org.
  • [DYNAMIC_EXECUTION]: The skill dynamically generates a temporary Salesforce metadata project structure (including sfdx-project.json and XML files) to facilitate the update of picklist defaults via the sf project deploy command. This is a standard procedural requirement for modifying certain Salesforce metadata types via CLI.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests external data by reading picklist values and existing matrix configurations from the Salesforce org. While this creates a potential surface for indirect prompt injection, the skill mitigates this by enforcing a mandatory human-in-the-loop confirmation step (AskUserQuestion) before any mutation is performed, and by providing raw CLI output for transparency.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 09:21 AM
Security Audit — agent-trust-hub — service-itsm-incident-priority-configure