sf-industry-commoncore-omnistudio-analyze
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill mentions the installation of related OmniStudio analysis plugins from the author's GitHub repository (github.com/Jaganpro/sf-skills) to support cross-skill integration.\n- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and parse complex metadata from a Salesforce environment to perform dependency and impact analysis.\n
- Ingestion points: The skill retrieves JSON content from Salesforce fields such as
PropertySetConfig,DataSourceConfig, andDefinitionviasf data query.\n - Boundary markers: There are no explicit instructions or delimiters defined to isolate the ingested metadata from the agent's control logic.\n
- Capability inventory: The skill has the capability to execute SOQL queries and REST API requests against a Salesforce org.\n
- Sanitization: The logic parses JSON for structural dependencies but does not describe any sanitization or validation to prevent the agent from following instructions that might be embedded within the metadata strings.
Audit Metadata