salesforce-development
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [SAFE]: The skill incorporates explicit security best practices for Salesforce development. It recommends using
WITH USER_MODEin Apex to enforce object-level security and field-level security, and it specifically warns against hardcoding credentials in source code, suggesting Named Credentials or External Client Apps instead. - [EXTERNAL_DOWNLOADS]: The skill provides an example of a CI/CD pipeline using GitHub Actions that installs the official Salesforce CLI (
@salesforce/cli) from the public npm registry. This is a standard practice for Salesforce development automation. - [COMMAND_EXECUTION]: The skill includes instructions for using the Salesforce CLI (
sf) to manage scratch orgs, deploy source code, assign permission sets, and run Apex tests. These commands are typical for the described development workflow. - [SAFE]: The provided Node.js code snippets for REST API and Bulk API 2.0 integrations use standard libraries (
jsonwebtoken,fs) and environment variables for secret management, adhering to industry standards for secure server-to-server authentication.
Audit Metadata