dx-devops-pipeline-manage

Pass

Audited by Gen Agent Trust Hub on Aug 19, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes sf devops CLI commands and several helper shell scripts (scripts/check-activation-ready.sh, scripts/validate-org-type.sh, scripts/verify-operation.sh) to perform its primary functions. These are legitimate uses of command execution to interact with a cloud platform.
  • The commands are structured to use --json for safe, programmatically verifiable output.
  • User inputs (like pipeline names and stage names) are passed as arguments to these commands, but the skill implements explicit validation steps (e.g., validate-org-type.sh) and uses jq for safe parsing of results.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 19, 2026, 12:29 AM
Security Audit — agent-trust-hub — dx-devops-pipeline-manage