salesforce-developer
Pass
Audited by Gen Agent Trust Hub on Mar 24, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill's CI/CD documentation includes instructions to download the Salesforce CLI ('sf') from the official Salesforce developer domain ('developer.salesforce.com'). This is a well-known and expected source for development tools.
- [COMMAND_EXECUTION]: The skill provides detailed guidance on using Salesforce CLI commands ('sf org login', 'sf project deploy', etc.) for authenticating with Salesforce environments and managing metadata deployments. These are standard operations for Salesforce development tasks.
- [SAFE]: All Apex code examples incorporate platform best practices, such as query bulkification and governor limit monitoring, to ensure performance and stability within the Salesforce multitenant architecture.
- [SAFE]: The documentation for dynamic database queries explicitly instructs on the use of security features like 'String.escapeSingleQuotes' and 'WITH SECURITY_ENFORCED' to protect against SOQL injection vulnerabilities.
Audit Metadata