data360-orchestrate

SUSPICIOUS. The skill’s purpose broadly matches its capabilities, and use of the official Salesforce CLI is expected, but the core `sf data360` runtime is an external non-vendored plugin with unclear official provenance. That makes install/execution trust the main issue: the skill is coherent for Data Cloud orchestration, yet it asks the agent to rely on a high-privilege third-party plugin for authenticated org operations.

This script is primarily a high-impact supply-chain installer. While the bash fragment itself contains no explicit malware/persistence/exfiltration logic, it fetches a repository whose URL is environment-influencable and then immediately executes installation/build steps (yarn install, npx/tsc, and node manifest generation) and links/runs the resulting plugin (sf plugins link, sf data360 man). Because there is no pinning to a specific revision and no integrity/signature verification in this wrapper, compromise of the repo, a dependency, or the PLUGIN_REPO value can lead to arbitrary code execution on the installing machine during dependency installation/build/verification.