sf-datacloud-harmonize

Warn

Audited by Socket on Mar 21, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: The skill’s purpose aligns with Salesforce Data Cloud harmonization, and use of the official `sf` CLI is expected. The main issue is that its core functionality depends on an unspecified community `sf data360` plugin and an unseen local script, with no verifiable install source or provenance. That makes the execution trust and actual data flow impossible to validate, which is disproportionate for a skill that can mutate Data Cloud assets.

Confidence: 85%Severity: 78%
Audit Metadata
Analyzed At
Mar 21, 2026, 09:13 PM
Package URL
pkg:socket/skills-sh/Jaganpro%2Fsf-skills%2Fsf-datacloud-harmonize%2F@510a5654d710e8977d98b503e5110bab548d3700