data360-query
Pass
Audited by Gen Agent Trust Hub on Aug 19, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the Salesforce CLI ('sf' command) to perform Data Cloud operations including SQL queries, vector searches, and search index management. These tools are official vendor resources provided by the skill author ('forcedotcom').\n- [COMMAND_EXECUTION]: The skill instructions include execution of a local Node.js script ('diagnose-org.mjs') for environment readiness verification. This script is part of the skill's internal project structure and does not involve remote code downloads.\n- [SAFE]: The skill processes external data retrieved from Data Cloud SQL and vector search results (Ingestion points: SKILL.md, README.md). While this represents a surface for indirect prompt injection, it is a core functional requirement for the skill's purpose. The capability inventory is limited to Data Cloud CLI operations, and no specific sanitization or boundary markers are defined for the result sets, representing a standard and managed risk for retrieval skills.
Audit Metadata