revenue-cloud-config-apis
Pass
Audited by Gen Agent Trust Hub on Sep 27, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill follows security best practices by utilizing the Salesforce CLI (
sf) to handle authentication tokens rather than requiring hardcoded credentials. It interacts only with standard Salesforce API endpoints based on the user's authorized instance. - [COMMAND_EXECUTION]: The bundled Bash script executes standard system utilities (
curl,jq,awk) and the Salesforce CLI. These executions are localized to the user's environment, follow the skill's stated purpose, and do not involve unsafe interpolation of untrusted remote data. - [INDIRECT_PROMPT_INJECTION]: While the skill ingests and parses responses from Salesforce APIs, it uses
jqfor sanitization and does not interpolate external data into instructions that could override agent behavior. The attack surface is minimal and handled using standard data processing practices.
Audit Metadata