sf-security

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides comprehensive patterns and instructions for auditing Salesforce Apex code, focusing on AppExchange security review readiness.
  • [SAFE]: The included shell script scripts/security-scan.sh uses local grep commands to identify potential issues and does not download or execute remote code.
  • [SAFE]: Allowed tools are appropriately restricted to file reading and the Salesforce CLI (sf), which aligns with the skill's stated purpose.
  • [SAFE]: No obfuscation, hardcoded credentials, or malicious persistence mechanisms were detected in the provided files.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 10:04 PM