sf-datacloud-segment
Warn
Audited by Socket on Mar 21, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The functional scope matches Salesforce Data Cloud segment work, but the skill’s core capability relies on an unspecified community sf data360 plugin whose provenance cannot be verified from the skill. Because an unverifiable external CLI/plugin would act with the user’s Salesforce-authenticated context, the install-trust and credential-forwarding risks are disproportionate until the exact plugin source, publisher, and release path are validated.
Confidence: 87%Severity: 82%
Audit Metadata