sf-integration
Pass
Audited by Gen Agent Trust Hub on Mar 13, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill contains automation scripts (
scripts/configure-named-credential.shandscripts/set-api-credential.sh) that use the Salesforce CLI (sf) to deploy metadata and manage org configuration. These are standard developer tools for Salesforce integration setup. - [COMMAND_EXECUTION]: The
configure-named-credential.shscript implements a dynamic execution pattern where it generates a temporary Apex file to interact with the SalesforceConnectApiand executes it using thesf apex runcommand. This process is used to securely store API keys provided by the user via a hidden prompt. - [COMMAND_EXECUTION]: The skill utilizes Claude lifecycle hooks (
.claude/hooks.yaml) to automatically trigger local Python scripts (suggest_credential_setup.pyandvalidate_integration.py) that provide contextual configuration guidance and security analysis based on the developer's file changes.
Audit Metadata