service-itsm-teams-itdesk-configure
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill uses the
headless-360tool to perform authenticated API interactions with a Salesforce organization. All operations (PATCH, GET, POST) target standard Salesforce Setup and SObject endpoints. - [EXTERNAL_DOWNLOADS]: The skill provides URLs to the Microsoft Marketplace (
marketplace.microsoft.com) and Salesforce Help (help.salesforce.com). These are well-known services and official vendor resources used to guide the user through manual installation steps. - [COMMAND_EXECUTION]: The skill executes state-changing API calls to configure organizational features and manage user access. This includes toggling the
OrgHasITSMFulfillerTeamspreference and assigning permission sets likeTeamsForITSrvcsUserandMicrosoftGraphAccessto specified users. - [INDIRECT_PROMPT_INJECTION]: The skill reads data from the
Userobject (Name, Username, Email) to display lists to the agent. It includes instructions for the agent to identify and flag potential system accounts to the user before performing assignments, reducing the risk of accidental privilege escalation for automated accounts.
Audit Metadata