salesforce-developer
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consistently promotes Salesforce security best practices across all modules, including bulkification of code and avoidance of hard-coded credentials.
- [INDIRECT_PROMPT_INJECTION]: The skill defines patterns for processing data from external APIs and CRM records. While this creates a potential attack surface, the provided code includes robust sanitization and security enforcement (e.g.,
WITH SECURITY_ENFORCED,String.escapeSingleQuotes) to mitigate risks. - [EXTERNAL_DOWNLOADS]: The CI/CD workflow examples include downloading the Salesforce CLI from the official Salesforce developer domain, which is a well-known and trusted service.
- [COMMAND_EXECUTION]: The skill provides standard Salesforce CLI commands for environment management and deployment, which are standard for the intended primary skill purpose.
Audit Metadata