platform-flexipage-generate

Pass

Audited by Gen Agent Trust Hub on Aug 27, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests user-provided data such as field names, component configurations, and static rich text content to generate or modify Salesforce FlexiPage XML files.
  • Ingestion points: User intent captured for field selection, component attributes, and rich text values (SKILL.md, references/flexipage_richText.md).
  • Boundary markers: The skill explicitly instructs the agent to entity-encode all HTML and XML characters (e.g., '&', '<', '>') within <value> tags to prevent structural corruption of the metadata (references/xml_rules.md).
  • Capability inventory: The skill possesses the capability to write XML files to the local file system (Write tool) and execute metadata deployments to a Salesforce org via the sf project deploy start command (SKILL.md).
  • Sanitization: Instructions require manual entity-encoding of property values and the use of the Salesforce CLI template generator to ensure a valid and safe base structure (references/xml_rules.md).- [COMMAND_EXECUTION]: The skill executes shell commands using the Bash tool to perform workspace operations and manage Salesforce metadata.
  • Evidence: Invokes the Salesforce CLI (sf template generate flexipage, sf project deploy start) and runs local utility scripts (scripts/scan-lwc-components.sh, scripts/resolve-component-instructions.sh) to scan for LWC components and resolve instruction files.- [EXTERNAL_DOWNLOADS]: The skill includes instructions to install an external dependency for the Salesforce CLI.
  • Evidence: The workflow requires installing the templates plugin using sf plugins install templates if the template generation command fails. As this is an official plugin for the Salesforce CLI (sf), it represents standard environment setup for the vendor's toolset.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 27, 2026, 04:35 PM
Security Audit — agent-trust-hub — platform-flexipage-generate