sf-datacloud-connect

Pass

Audited by Gen Agent Trust Hub on Sep 14, 2026

Risk Level: SAFEDYNAMIC_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [DYNAMIC_EXECUTION]: The skill instructs the agent to run a diagnostic script located at ~/.claude/skills/sf-datacloud/scripts/diagnose-org.mjs. This script is part of a shared utility set within the same skill ecosystem to verify Salesforce organization readiness before performing operations.
  • [COMMAND_EXECUTION]: The skill relies on the sf (Salesforce CLI) tool and the data360 plugin to perform actions such as listing, creating, and testing data connections. This is the primary function of the skill and uses standard administrative commands.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests JSON files to define connection parameters and schemas. While these are external data sources, they are passed as file arguments to the Salesforce CLI for processing and validation, representing a standard workflow for infrastructure-as-code or configuration management.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 14, 2026, 05:47 PM
Security Audit — agent-trust-hub — sf-datacloud-connect