platform-manifest-generate
Pass
Audited by Gen Agent Trust Hub on Aug 31, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a utility for Salesforce developers to generate package manifests. It is authored by the platform vendor and follows official CLI usage patterns.
- [DATA_EXPOSURE]: The skill accesses local source code and project configuration to identify metadata for inclusion in the manifest. This access is restricted to the current project directory and is necessary for manifest generation.
- [COMMAND_EXECUTION]: The skill instructs the agent to use the 'sf' CLI to generate XML files. This is a standard and supported method for managing Salesforce metadata.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests metadata component names from local files and Salesforce orgs. The risk is minimized as the data is used to generate structured XML manifests rather than being directly executed as instructions by the agent.
Audit Metadata