platform-mcp-tool-widget-coordinate
Pass
Audited by Gen Agent Trust Hub on Aug 18, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements a strictly controlled orchestration flow for generating UI components based on Salesforce Apex metadata. It uses standard
sfCLI tools for discovery and delegates actual file authoring to specialized leaf skills. - [SAFE]: The execution environment is restricted to authenticated Salesforce orgs using official API endpoints. No evidence of credential harvesting or unauthorized external network calls was detected.
- [SAFE]: Hard rules are enforced to prevent common security pitfalls, such as requiring nested renderer bindings and prohibiting shell metacharacters to avoid command injection.
- [SAFE]: Validation gates (
clt-reference-integrity,renderer-wires-widget,nested-list-coverage) are mandatory and run locally to verify the correctness of the generated metadata without executing remote code.
Audit Metadata