experience-ui-bundle-file-upload-generate
Pass
Audited by Gen Agent Trust Hub on Aug 28, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill involves the installation of the
@salesforce/ui-bundle-template-feature-react-file-uploadpackage from the public npm registry. This package is part of a scoped collection belonging to a well-known technology organization and is a standard dependency for this development context. - [INDIRECT_PROMPT_INJECTION]: The skill instructions create an attack surface by handling untrusted user input in the form of file uploads.
- Ingestion points: Data enters the application context through the
filesarray in theupload()function, typically populated by a file input or drag-and-drop UI component as shown inSKILL.md. - Boundary markers: The code examples do not include explicit validation or sanitization of the file content before it is processed for upload.
- Capability inventory: The generated code is capable of making network requests to upload data to Salesforce infrastructure and creating records via the
createContentVersion()function. - Sanitization: The implementation relies on the Salesforce platform's internal security mechanisms to handle and sanitize uploaded content upon receipt at the API endpoint.
Audit Metadata