data360-schema-get
Pass
Audited by Gen Agent Trust Hub on Aug 19, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses Python's
subprocess.runto execute the Salesforce CLI (sf) to retrieve authentication metadata (instance URL and access token) for a specified org alias. The command is executed using a list of arguments, which is a secure practice to prevent shell injection. - [DATA_EXPOSURE_AND_EXFILTRATION]: The scripts access Salesforce OAuth access tokens via the local CLI environment. These tokens are used solely to authenticate requests to official Salesforce SSOT REST API endpoints (
/services/data/v64.0/ssot/). This behavior is consistent with the skill's stated purpose of schema retrieval and is performed by an official vendor toolset.
Audit Metadata