salesforce-developer
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The DevOps reference guide includes automation scripts for CI/CD pipelines that fetch the official Salesforce CLI from developer.salesforce.com. This is a standard and safe operation for setting up Salesforce DX environments.
- [DYNAMIC_EXECUTION]: The skill provides examples of dynamic SOQL and programmatic metadata deployment. It includes necessary security mitigations, such as using
String.escapeSingleQuotes()for input sanitization andWITH SECURITY_ENFORCEDto respect field-level security and sharing rules. - [INDIRECT_PROMPT_INJECTION]: The skill's workflow involves interpreting user-provided business requirements to generate code. It provides robust guardrails, instructing the agent to never hard-code credentials, always check field-level security, and use selective queries to maintain platform safety.
Audit Metadata