sf-datacloud-prepare
Pass
Audited by Gen Agent Trust Hub on Mar 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes multiple 'sf data360' CLI subcommands (e.g., 'data-stream list', 'dlo get') to manage Salesforce Data Cloud resources.- [COMMAND_EXECUTION]: Invokes a local Node.js script located at '~/.claude/skills/sf-datacloud/scripts/diagnose-org.mjs' to verify environment readiness.- [EXTERNAL_DOWNLOADS]: Requires the installation of an external community CLI plugin ('sf data360') to facilitate Data Cloud operations.- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection via the output of external CLI tools (Category 8).* Ingestion points: Command outputs from 'sf data360' which are read back into the agent context.* Boundary markers: No explicit instructions to ignore embedded commands in the ingested data were found.* Capability inventory: The skill can execute CLI commands and run local scripts based on decisions made from processed data.* Sanitization: There is no documented validation or sanitization of the data retrieved from the Salesforce org before it is used to drive subsequent agent actions.
Audit Metadata