Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

Salesforce AI Agent Script

v1.0.0

Agent Script DSL for deterministic Agentforce agents. TRIGGER when: user writes or edits .agent files, builds FSM-based agents, uses Agent Script CLI (sf age...

0· 80·0 current·0 all-time
byAnush DSouza@dsouza-anush

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for dsouza-anush/sf-ai-agentscript.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "Salesforce AI Agent Script" (dsouza-anush/sf-ai-agentscript) from ClawHub.
Skill page: https://clawhub.ai/dsouza-anush/sf-ai-agentscript
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install sf-ai-agentscript

ClawHub CLI

Package manager switcher

npx clawhub@latest install sf-ai-agentscript
Security Scan
Capability signals
CryptoCan make purchasesRequires OAuth token
These labels describe what authority the skill may exercise. They are separate from suspicious or malicious moderation verdicts.
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
Purpose & Capability
Name/description, documentation, example bundles, and included validator scripts align with an authoring/validation helper for Salesforce Agent Script. There are no unrelated environment variables, binaries, or remote install steps requested.
Instruction Scope
SKILL.md focuses on authoring, validation, CLI workflows (sf agent validate/preview/publish) and guidance for .agent files. This is in-scope. A static scanner flagged a prompt-injection pattern within SKILL.md (see scan_findings_in_context); the visible instructions do not otherwise ask for unrelated system secrets or to exfiltrate files, but you should review the skill text and any templates for embedded instructions that try to override or redirect agent behavior.
Install Mechanism
No install spec is present (instruction-only), and there are no download/extract steps or external package installs. The repository includes two Python validator scripts and many documentation files; including code in the skill bundle is reasonable for linting/validation but review those scripts before running locally.
Credentials
The skill declares no required environment variables or credentials. It references Salesforce CLI commands and Named Credentials (typical for Salesforce deployments) which require regular Salesforce auth flows — appropriate for the described functionality and not requested directly by the skill.
Persistence & Privilege
Flags show always:false and normal model invocation allowed. agents/openai.yaml sets allow_implicit_invocation: true which means the skill may be implicitly invoked by platform triggers (e.g., when editing .agent files) — this is consistent with the stated trigger rules but you should confirm implicit invocation behavior meets your policies.
Scan Findings in Context
[prompt-injection:ignore-previous-instructions] unexpected: A regex scanner found the token 'ignore-previous-instructions' in SKILL.md content. This is not expected for a documentation/validation skill and could be a benign artifact (instruction examples, warnings, or false positive). Treat it as a prompt-injection signal to review SKILL.md for any lines that attempt to override platform or agent safety instructions.
Assessment
This skill appears to be what it says: documentation, patterns, and local validators for Salesforce Agent Script authoring. Before installing or running it: 1) Manually inspect the two Python scripts (hooks/scripts/agentscript-syntax-validator.py and scripts/validate-asset-profiles.py) and any other executable files for unexpected network calls or code that runs arbitrary shell commands. 2) Confirm how your platform treats allow_implicit_invocation and triggers so the skill doesn't run automatically in contexts you don't expect. 3) Use normal Salesforce auth flows for CLI commands; do not paste long-lived secrets into skill configuration. 4) Because a prompt-injection pattern was flagged in SKILL.md, quickly scan the skill documentation for any content that attempts to instruct the agent to ignore previous safety instructions or to exfiltrate files/credentials; remove or sandbox any such lines. If you want, I can extract and show the contents of the two Python scripts and the relevant SKILL.md sections flagged for manual review.
!
references/fsm-architecture.md:393
Prompt-injection style instruction pattern detected.
About static analysis
These patterns were detected by automated regex scanning. They may be normal for skills that integrate with external APIs. Check the VirusTotal and OpenClaw results above for context-aware analysis.

Like a lobster shell, security has layers — review code before you run it.

latestvk974pzxc246xprbxnc7779d0kn84hpw0salesforcevk974pzxc246xprbxnc7779d0kn84hpw0
80downloads
0stars
1versions
Updated 2w ago
v1.0.0
MIT-0

SF-AI-AgentScript Skill

Agent Script is the code-first path for deterministic Agentforce agents. Use this skill when the user is authoring .agent files, building finite-state topic flows, or needs repeatable control over routing, variables, actions, and publish behavior.

Start with the shortest guide first: references/activation-checklist.md

Migrating from the Builder UI? Use references/migration-guide.md

When This Skill Owns the Task

Use sf-ai-agentscript when the work involves:

  • creating or editing .agent files
  • deterministic topic routing, guards, and transitions
  • Agent Script CLI workflows (sf agent generate authoring-bundle, sf agent validate authoring-bundle, sf agent preview, sf agent publish authoring-bundle, sf agent activate)
  • slot filling, instruction resolution, post-action loops, or FSM design

Delegate elsewhere when the user is:

If the user is in Builder Script / Canvas view but the outcome is a .agent authoring bundle, keep the work in sf-ai-agentscript.


Required Context to Gather First

Ask for or infer:

  • agent purpose and whether Agent Script is truly the right fit
  • Service Agent vs Employee Agent
  • target org and publish intent
  • expected actions / targets (Flow, Apex, PromptTemplate, etc.)
  • whether the request is authoring, validation, preview, or publish troubleshooting

Activation Checklist

Before you author or fix any .agent file, verify these first:

  1. Exactly one start_agent block
  2. No mixed tabs and spaces
  3. Booleans are True / False
  4. No else if and no nested if
  5. No top-level actions: block
  6. No @inputs in set expressions
  7. linked variables have no defaults
  8. linked variables do not use object / list types
  9. Use explicit agent_type
  10. Use @actions. prefixes consistently
  11. Use run @actions.X only when X is a topic-level action definition with target:
  12. Do not branch directly on raw @system_variables.user_input contains/startswith/endswith for intent routing
  13. On prompt-template outputs, prefer is_displayable: False + is_used_by_planner: True
  14. Do not assume @outputs.X is scalar — inspect the output schema before branching or assignment

For the expanded version, use references/activation-checklist.md.


Non-Negotiable Rules

1) Service Agent vs Employee Agent

Agent typeRequiredForbidden / caution
AgentforceServiceAgentValid default_agent_user, correct permissions, target-org checks, prefer sf org create agent-userPublishing without a real Einstein Agent User
AgentforceEmployeeAgentExplicit agent_typeSupplying default_agent_user

Full details: references/agent-user-setup.md

2) Recommended top-level block convention

Use this order for consistency in this skill's examples and reviews:

config:
variables:
system:
connection:
knowledge:
language:
start_agent:
topic:

Official Salesforce materials present top-level blocks in differing sequences, and local validation evidence indicates multiple orderings compile. Treat this as a style convention, not a standalone correctness or publish blocker.

3) Critical config fields

FieldRule
developer_nameMust match folder / bundle name
descriptionPublic docs/examples should use this config field
agent_typeSet explicitly every time
default_agent_userService Agents only

Local tooling also accepts agent_description: for compatibility, but this skill's public docs and examples should prefer description:.

4) Syntax blockers you should treat as immediate failures

  • else if
  • nested if
  • comment-only if bodies
  • top-level actions:
  • invocation-level inputs: / outputs: blocks
  • reserved variable / field names like description and label

Canonical rule set: references/syntax-reference.md and references/validator-rule-catalog.md


Recommended Workflow

Recommended Authoring Workflow

Phase 1 — design the agent

  • decide whether the problem is actually deterministic enough for Agent Script
  • model topics as states and transitions as edges
  • define only the variables you truly need

Phase 2 — author the .agent

  • create config, system, start_agent, and topics first
  • add target-backed actions with full inputs: and outputs:
  • use available when for deterministic tool visibility
  • normalize raw intent/validation signals into booleans or enums before branching; avoid direct substring checks on raw user utterances for critical control flow
  • keep post-action checks at the top of instructions: ->

Default authoring stance

  • Default to direct .agent authoring and edits in source control.
  • Use sf agent generate authoring-bundle --no-spec only when the user wants local bundle scaffolding.
  • Treat sf agent generate agent-spec as optional ideation / topic bootstrap, not the default workflow.
  • Do not route Agent Script users toward sf agent create or sf agent generate template.

Phase 3 — validate continuously

Validation already runs automatically on write/edit. Use the CLI before publish:

sf agent validate authoring-bundle --api-name MyAgent -o TARGET_ORG --json

The validator covers structure, runtime gotchas, target readiness, and org-aware Service Agent checks. Rule IDs live in references/validator-rule-catalog.md.

Phase 4 — preview smoke test

Use the preview loop before publish:

  • derive 3–5 smoke utterances
  • start preview with the start / send / end subcommands, not bare sf agent preview
  • if you use --authoring-bundle, always choose a mode explicitly: --simulate-actions or --use-live-actions
  • inspect topic routing / action invocation / safety / grounding
  • fix and rerun up to 3 times

Full loop: references/preview-test-loop.md

Phase 5 — publish and activate

sf agent publish authoring-bundle --api-name MyAgent -o TARGET_ORG --json

# Manual activation
sf agent activate --api-name MyAgent -o TARGET_ORG

# CI / deterministic activation of a known BotVersion
sf agent activate --api-name MyAgent --version <n> -o TARGET_ORG --json

Publishing does not activate the agent. For automation, prefer --version <n> --json so activation is deterministic and machine-readable.


Deterministic Building Blocks

These execute as code, not suggestions:

  • conditionals
  • available when guards
  • variable checks
  • direct set / transition to
  • run @actions.X only when X is a topic-level action definition with target:
  • variable injection into LLM-facing text

Important distinction:

  • Deterministic: set, transition to, and run @actions.X for a target-backed topic action
  • LLM-directed: reasoning.actions: utilities / delegations such as @utils.setVariables, @utils.transition, and {!@actions.X} instruction references

If you need deterministic behavior for something that is currently modeled as a reasoning-level utility, either:

  • rewrite it as direct set / transition to, or
  • promote it to a topic-level target-backed action and run that action

See references/instruction-resolution.md and references/architecture-patterns.md.


Cross-Skill Integration

Cross-Skill Orchestration

TaskDelegate toWhy
Build flow:// targetssf-flowFlow creation / validation
Build Apex action targetssf-apex@InvocableMethod and business logic
Test topic routing / actionssf-ai-agentforce-testingFormal test specs and fix loops
Deploy / publishsf-deployDeployment orchestration

High-Signal Failure Patterns

SymptomLikely causeRead next
Internal Error during publishinvalid Service Agent user or missing action I/Oreferences/agent-user-setup.md, references/actions-reference.md
invalid input/output parameters on prompt template actionTarget template is in Draft status — activate it firstreferences/action-prompt-templates.md
Parser rejects conditionalselse if, nested if, empty if bodyreferences/syntax-reference.md
Action target issuesmissing Flow / Apex target, inactive Flow, bad schemasreferences/actions-reference.md
Prompt template runs but user sees blank responseprompt output marked is_displayable: Truereferences/production-gotchas.md, references/action-prompt-templates.md
Prompt action runs but planner behaves like output is missingoutput hidden from direct display but not planner-visiblereferences/production-gotchas.md, references/actions-reference.md
ACTION_NOT_IN_SCOPE on run @actions.Xrun points at a utility / delegation / unresolved action instead of a topic-level target-backed definitionreferences/syntax-reference.md, references/instruction-resolution.md
Deterministic cancel / revise / URL checks behave inconsistentlyraw @system_variables.user_input matching or string-method guards are being used as control-flow-critical validationreferences/syntax-reference.md, references/production-gotchas.md
@outputs.X comparisons or assignments behave unexpectedlythe action output is structured/wrapped, not a plain scalarreferences/actions-reference.md, references/syntax-reference.md
Preview and runtime disagreelinked vars / context / known platform issuesreferences/known-issues.md
Validate passes but publish failsorg-specific user / permission / retrieve-back issuereferences/production-gotchas.md, references/cli-guide.md

Reference Map

Start here

Publish / runtime safety

Architecture / reasoning

Validation / testing / debugging

Examples / scaffolds

Project documentation


Score Guide

ScoreMeaning
90+Deploy with confidence
75–89Good, review warnings
60–74Needs focused revision
< 60Block publish

Full rubric: references/scoring-rubric.md


Official Resources

Comments

Loading comments...