service-itsm-teams-itdesk-configure

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill uses the headless-360 tool to perform authenticated API interactions with a Salesforce organization. All operations (PATCH, GET, POST) target standard Salesforce Setup and SObject endpoints.
  • [EXTERNAL_DOWNLOADS]: The skill provides URLs to the Microsoft Marketplace (marketplace.microsoft.com) and Salesforce Help (help.salesforce.com). These are well-known services and official vendor resources used to guide the user through manual installation steps.
  • [COMMAND_EXECUTION]: The skill executes state-changing API calls to configure organizational features and manage user access. This includes toggling the OrgHasITSMFulfillerTeams preference and assigning permission sets like TeamsForITSrvcsUser and MicrosoftGraphAccess to specified users.
  • [INDIRECT_PROMPT_INJECTION]: The skill reads data from the User object (Name, Username, Email) to display lists to the agent. It includes instructions for the agent to identify and flag potential system accounts to the user before performing assignments, reducing the risk of accidental privilege escalation for automated accounts.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 09:40 AM
Security Audit — agent-trust-hub — service-itsm-teams-itdesk-configure