AGENTFORCE-SC-02: Silent Schema Desync Exploit

🔴 High · Supply Chain Security

When a schema.json is modified, its parent genAiFunction-meta.xml must also be modified in the same deployment payload. Salesforce silently ignores schema updates unless the XML is tampered with, causing hallucination masking.

Details

Field	Value
Rule ID	AGENTFORCE-SC-02
Severity	High
Category	Supply Chain Security
Compliance	SOC2_CC7, NIST_AI_RMF

Remediation

Refer to the SquireX documentation for remediation guidance specific to AGENTFORCE-SC-02.

See Also

• Rule catalog index
• SquireX scan documentation