sf-soql

Warn

Audited by Socket on Sep 15, 2026

1 alert found:

Anomaly
AnomalyLOW
references/soql-reference.md

No evidence of malware, credential theft, exfiltration, persistence, or obfuscation appears in this documentation fragment. The principal security concern is conditional SOQL injection and query manipulation in AccountQueryBuilder: selected fields and ORDER BY components are concatenated without allowlisting, and sort direction and limit are not validated. Use fixed field allowlists, validate direction against ASC/DESC, enforce bounded numeric limits, and prefer bind variables wherever possible.

Confidence: 95%Severity: 58%
Audit Metadata
Analyzed At
Sep 15, 2026, 10:05 PM
Package URL
pkg:socket/skills-sh/clientell-ai%2Fsalesforce-skills%2Fsf-soql%2F@f72949977a152bdc3c9cdf3537b4f75a877cd4ac1e16fa876f1e0d76fd2bb730