forcedotcom/sf-skills service-itsm-agentic-setup-itsm-agentforce-permset-assign

Checked the catalogued skill at service-itsm-agentic-setup-itsm-agentforce-permset-assign.

SkillTrust corpus scan 7 November 2026 v0.13.0 via skillsh Verify on GitHub

D AI-triaged 6

A Security

A set by no findings on this axis

D Permissions

D; retained sample includes a high finding · SD-003 · what this rule accepts as a false positive →

A Transparency

A set by no findings on this axis

6 findings

permission_hygienehigh SD-003

SKILL.md

permission_hygienehigh SD-003

SKILL.md

permission_hygienehigh SD-003

SKILL.md

permission_hygienehigh SD-003

SKILL.md

permission_hygienehigh SD-003

SKILL.md

permission_hygienehigh SD-003

SKILL.md

6 suppressed by AI triage

permission_hygienehigh SD-003 benign_example

SKILL.md

The snippet contains no actual '../' or absolute path references.

permission_hygienehigh SD-003 benign_example

SKILL.md

The file is documentation and only references a path traversal pattern, not executable code.

permission_hygienehigh SD-003 benign_example

SKILL.md

No path traversal evidence in the context; the line contains only empty content.

permission_hygienehigh SD-003 benign_example

references/cli-invocation.md

Documentation only; the absolute path is an example, not executed.

permission_hygienehigh SD-003 benign_example

references/cli-invocation.md

Documentation only; the absolute path is an example, not executed.

securityhigh SD-007 benign_example

scripts/resolve-target-user.mjs

The outbound URL reference appears only in a comment, not as executable code, so no real outbound network call is present.