sf-datacloud-connect

SUSPICIOUS: the skill’s capabilities and requested credentials fit its stated Salesforce Data Cloud connection purpose, and data flows mostly target Salesforce APIs. The main issue is install/execution trust: it depends on an external community `sf data360` plugin with unclear official provenance, and credentials may be forwarded to that runtime during connection creation/testing. This is not confirmed malware, but the unverifiable plugin dependency makes the skill high-risk.