AGENTFORCE-FLOW-03: Variable Injection in DML
🔴 High · Injection
Dynamic AI input directly evaluates inside a Flow Object Filter, risking SOQL injection.
Details
| Field | Value |
|---|---|
| Rule ID | AGENTFORCE-FLOW-03 |
| Severity | High |
| Category | Injection |
| Compliance | EU_AI_ACT_HIGH_RISK, SOC2_CC7 |
Remediation
Add input validation and sanitization within the Flow before using values in queries or DML.