avonni-flow-components
Pass
Audited by Gen Agent Trust Hub on Aug 12, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: Uses the Salesforce CLI (
sf sobject list,sf sobject describe) to retrieve object and field metadata. These operations are necessary to ensure that the flow components are configured with valid Salesforce API names from the target organization. - [COMMAND_EXECUTION]: Executes local utility scripts included with the skill (
create-flow.mjs,fix-flow.mjs,validate-flow.mjs) to manage the lifecycle of flow metadata files. These scripts automate XML scaffolding, handle the generation of UUID-based context variables, and enforce structural validation of component configuration. - [COMMAND_EXECUTION]: Utilizes a Node.js one-liner via the
-eflag to process JSON data returned by the Salesforce CLI. This is used as a local data filter to format field documentation for the agent's context and does not involve executing external or untrusted code.
Audit Metadata