implementing-ui-bundle-agentforce-conversation-client

Fail

Audited by Snyk on Apr 4, 2026

Risk Level: HIGH
Full Analysis

HIGH W007: Insecure credential handling detected in skill instructions.

  • Insecure credential handling detected (high risk: 0.80). The prompt explicitly tells the agent to ask the user for their Salesforce agent ID and then insert that exact value verbatim into generated TSX (agentId="0Xx..."), which requires the LLM to handle and output a user-provided secret/identifier directly.

Issues (1)

W007
HIGH

Insecure credential handling detected in skill instructions.

Audit Metadata
Risk Level
HIGH
Analyzed
Apr 4, 2026, 01:10 AM
Issues
1