salesforce-ci-integration

Pass

Audited by Gen Agent Trust Hub on Mar 25, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides standard documentation and templates for Salesforce CI/CD integration.
  • [CREDENTIALS_SAFE]: The instructions mandate the use of GitHub Secrets (gh secret set) for sensitive data like JWT keys and passwords, which is the recommended security practice for CI/CD pipelines.
  • [EXTERNAL_DOWNLOADS]: Dependencies include the official Salesforce CLI (@salesforce/cli) from npm and official GitHub Actions, which are well-known and trusted.
  • [COMMAND_EXECUTION]: Shell commands are restricted to the Salesforce CLI (sf), GitHub CLI (gh), and Node.js toolchain (npm), consistent with the skill's purpose.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 25, 2026, 04:41 PM