service-itsm-incident-priority-configure
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
sfCLI to perform administrative tasks within a Salesforce environment. This includes executing authenticated REST requests, querying the Tooling API, and performing metadata deployments. All operations are scoped to the user's authenticated target org. - [DYNAMIC_EXECUTION]: The skill dynamically generates a temporary Salesforce metadata project structure (including
sfdx-project.jsonand XML files) to facilitate the update of picklist defaults via thesf project deploycommand. This is a standard procedural requirement for modifying certain Salesforce metadata types via CLI. - [INDIRECT_PROMPT_INJECTION]: The skill ingests external data by reading picklist values and existing matrix configurations from the Salesforce org. While this creates a potential surface for indirect prompt injection, the skill mitigates this by enforcing a mandatory human-in-the-loop confirmation step (
AskUserQuestion) before any mutation is performed, and by providing raw CLI output for transparency.
Audit Metadata