The Agent Skills Directory

[SAFE]: The skill is well-structured and focuses on legitimate Salesforce development tasks. It explicitly prohibits the use of hardcoded credentials and IDs in its constraints section.
[EXTERNAL_DOWNLOADS]: The DevOps documentation provides examples of CI/CD pipelines that fetch the Salesforce CLI binary from developer.salesforce.com. This is the official and verified distribution channel for the Salesforce CLI.
[COMMAND_EXECUTION]: The documentation includes standard Salesforce CLI (sf) commands for common developer workflows such as org authentication, source deployment, and metadata retrieval. These commands are typical for the skill's intended use case and are not used maliciously.
[SAFE]: Integration patterns in the reference guides utilize Named Credentials, which is the platform's recommended secure way to manage authentication for external service calls.
[SAFE]: The dynamic SOQL and REST API examples include defensive coding patterns, such as input sanitization with String.escapeSingleQuotes() and enforcement of security policies with WITH SECURITY_ENFORCED and explicit field accessibility checks.

salesforce-developer