sf-security
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides comprehensive patterns and instructions for auditing Salesforce Apex code, focusing on AppExchange security review readiness.
- [SAFE]: The included shell script
scripts/security-scan.shuses localgrepcommands to identify potential issues and does not download or execute remote code. - [SAFE]: Allowed tools are appropriately restricted to file reading and the Salesforce CLI (
sf), which aligns with the skill's stated purpose. - [SAFE]: No obfuscation, hardcoded credentials, or malicious persistence mechanisms were detected in the provided files.
Audit Metadata