AGENTFORCE-FLOW-02: Silent State Modification via Flow
🔴 High · Unauthorized Action
Action targets a Flow containing DML mutations but is invoked without human-in-the-loop confirmation.
Details
| Field | Value |
|---|---|
| Rule ID | AGENTFORCE-FLOW-02 |
| Severity | High |
| Category | Unauthorized Action |
| Compliance | SOC2_CC6, SOC2_CC7 |
Remediation
Ensure DML-performing Flows are wrapped in actions with isConfirmationRequired=true.