dx-org-switch
Pass
Audited by Gen Agent Trust Hub on Aug 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the Salesforce CLI tool (
sf) to perform operations such as listing authenticated orgs (sf org list), setting configuration values (sf config set), and verifying configuration (sf config get). These are the intended and documented behaviors of the tool. - [INDIRECT_PROMPT_INJECTION]: The skill accepts user-provided input for an
orgIdentifierwhich is then interpolated into shell commands. While this presents a potential surface for command injection if the input is malicious, the skill is designed to wrap a specific CLI tool and the risks are typical for this type of utility. - [SAFE]: The skill references the official Salesforce developer documentation domain (developer.salesforce.com), which is a trusted source for the tool's usage guidelines.
Audit Metadata