The Agent Skills Directory

[SAFE]: The skill uses official Salesforce CLI (sf) commands for all core deployment, validation, and metadata management tasks.
[SAFE]: Authentication strategies described (JWT Bearer Flow and SFDX Auth URL) are the standard recommended methods for secure, headless authentication in CI/CD environments, utilizing encrypted keys and platform secrets.
[SAFE]: The inclusion of a data masking script (SandboxPostRefresh) for sandbox creation demonstrates adherence to security best practices for protecting sensitive information in non-production environments.
[SAFE]: Mentioned dependencies like @salesforce/cli and the sfdx-git-delta plugin are well-established, standard tools within the Salesforce developer community.
[SAFE]: The allowed-tools configuration is restricted to standard file operations and the specific sf CLI binary, following the principle of least privilege.

sf-deploy