sf-datacloud-prepare

Warn

Audited by Socket on Apr 28, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: The skill’s purpose broadly matches Salesforce Data Cloud preparation work, but it relies on an unverifiable community `sf data360` plugin that operates with authenticated Salesforce org access. That dependency is disproportionate from a trust perspective even if the workflow itself is legitimate, so the main risk is supply-chain and credential exposure through third-party CLI code rather than confirmed malicious behavior.

Confidence: 83%Severity: 82%
Audit Metadata
Analyzed At
Apr 28, 2026, 08:00 PM
Package URL
pkg:socket/skills-sh/jaganpro%2Fclaude-code-sfskills%2Fsf-datacloud-prepare%2F@c540eb8f2f1b27115938cec33df6d4781bbd69e2