skills/clawlink-hq/skills/salesforce/Socket

salesforce

Warn

Audited by Socket on Jun 28, 2026

1 alert found:

Anomaly

AnomalySKILL.md

LOW

AnomalyLOW

SKILL.md

SUSPICIOUS: the skill’s stated Salesforce purpose is coherent, and the CLI appears to come from the same publisher, but the integration routes Salesforce access and credentials through ClawLink instead of official Salesforce APIs. That third-party mediation, combined with write actions and email sending, makes the footprint materially riskier than a direct Salesforce integration.

Confidence: 87%Severity: 69%

Audit Metadata

Analyzed At

Jun 28, 2026, 02:46 PM

Package URL

pkg:socket/skills-sh/clawlink-hq%2Fskills%2Fsalesforce%2F@331ecb09ddbc00e49c55838b0aa325e07392747c8655239655b051cac6c33d51