sf-test
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill is designed to execute Salesforce CLI commands (
sf apex run test) to automate the execution of generated tests and the collection of code coverage data.- [INDIRECT_PROMPT_INJECTION]: The skill analyzes local Apex source files, creating a surface where instructions embedded in code comments could influence the agent's behavior. - Ingestion points: Local Apex source files read via the Read and Glob tools (SKILL.md).
- Boundary markers: Absent; the skill does not implement specific delimiters to separate code logic from potential instructions in comments.
- Capability inventory: The skill has the ability to read/write files and execute shell commands via the Salesforce CLI.
- Sanitization: Absent; there is no evidence of filtering or sanitizing the content of the files being analyzed.
Audit Metadata