platform-apex-logs-debug
Pass
Audited by Gen Agent Trust Hub on Sep 3, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the Salesforce CLI (sf) and jq for log retrieval and parsing. These are standard developer tools, and their use is consistent with the skill's purpose of debugging Salesforce environments.
- [INDIRECT_PROMPT_INJECTION]: The skill processes Salesforce debug logs which are external data sources.
- Ingestion points: Standard output from sf CLI commands 'sf apex get log' and 'sf apex tail log'.
- Boundary markers: The skill defines a structured reporting template (Issue, Location, Root cause, Severity, Fix, Verify) to separate raw log data from the agent's final analysis.
- Capability inventory: The skill can execute sf CLI commands to query or delete records in the Salesforce org and can save logs to local files via provided bash scripts.
- Sanitization: No specific input sanitization for log content is described in the skill instructions, as the skill operates within the developer's authenticated environment.
Audit Metadata