sf-datacloud-retrieve

SUSPICIOUS/HIGH-RISK rather than confirmed malware. The skill’s capabilities fit its Salesforce Data Cloud retrieval purpose, but it relies on an external community CLI plugin and an unbundled local script, both of which execute with Salesforce org access. That creates a high supply-chain and credential-forwarding risk disproportionate to a simple documentation-style skill.