salesforce-development
Pass
Audited by Gen Agent Trust Hub on Apr 27, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill includes robust safety constraints, such as prohibiting wildcard deployments and requiring explicit target org resolution before execution to prevent errors.\n- [EXTERNAL_DOWNLOADS]: Installation workflows rely on cloning the official repository from GitHub, which is a standard and transparent distribution method for agent skills.\n- [COMMAND_EXECUTION]: Shell commands are strictly limited to the Salesforce CLI (
sf), standard filesystem utilities (mkdir,rm), and the Prettier formatter. These tools are used appropriately and safely for their intended developer workflow.\n- [PROMPT_INJECTION]: The skill has a surface for indirect prompt injection through its interaction with external Salesforce orgs.\n - Ingestion points: Metadata names and component content retrieved via
sf org list metadataandsf project retrieve start.\n - Boundary markers: Instructions mandate the use of the
--jsonflag to provide structured output for agent parsing.\n - Capability inventory: The skill utilizes subprocess calls to the
sfCLI, performs local file writes, and runsnpx prettier.\n - Sanitization: No explicit sanitization or filtering of the content retrieved from the org is performed before agent processing.
Audit Metadata