sf-datacloud-prepare
Warn
Audited by Socket on Apr 28, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS: The skill’s purpose broadly matches Salesforce Data Cloud preparation work, but it relies on an unverifiable community `sf data360` plugin that operates with authenticated Salesforce org access. That dependency is disproportionate from a trust perspective even if the workflow itself is legitimate, so the main risk is supply-chain and credential exposure through third-party CLI code rather than confirmed malicious behavior.
Confidence: 83%Severity: 82%
Audit Metadata