salesforce
Pass
Audited by Gen Agent Trust Hub on Jun 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
@useclawlink/clitool to perform operations such aslogin,connect, andrunfor Salesforce actions. These commands are executed via the shell to interact with the Salesforce API. - [EXTERNAL_DOWNLOADS]: The skill utilizes
npxto download and execute the@useclawlink/clipackage directly from the NPM registry at runtime. - [CREDENTIALS_UNSAFE]: The skill documentation specifies that authentication credentials for ClawLink are stored locally in a JSON file at
~/.clawlink/credentials.json. This is a standard practice for CLI-based authentication and is managed by the vendor's tool. - [DATA_EXPOSURE]: The skill accesses Salesforce data (records, fields, queries) which is the intended functionality of the integration. It supports both read and write operations within the user's CRM environment.
Audit Metadata