sf-flex-estimator
Pass
Audited by Gen Agent Trust Hub on Apr 28, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is designed as a planning and estimation tool for Salesforce architecture tradeoffs. All pricing logic is derived from public documentation and implemented in local scripts.- [COMMAND_EXECUTION]: The skill includes Python scripts (
assets/calculators/flex_calculator.py,assets/calculators/tier_multiplier.py, andhooks/scripts/validate_estimate.py) to automate calculations. These scripts use only standard Python libraries (argparse, json, dataclasses) and perform no network operations or arbitrary shell execution.- [PROMPT_INJECTION]: The instructions inSKILL.mdprovide clear operational boundaries and delegation rules without any attempts to override safety filters or bypass system guidelines. It also identifies the Indirect Prompt Injection surface (Cat 8): (1) Ingestion points: JSON files and user-provided configuration parameters inSKILL.md. (2) Boundary markers: Instructions explicitly define the 'Required Context to Gather First'. (3) Capability inventory: File reading and mathematical calculation via local scripts. (4) Sanitization: Strict type validation and canonical naming logic within the included calculation scripts.- [DATA_EXFILTRATION]: No network exfiltration or sensitive data exposure patterns were detected. The skill does not access credentials, system configurations, or environment variables.
Audit Metadata