data360-schema-get
Pass
Audited by Gen Agent Trust Hub on Jun 26, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes the Salesforce CLI (
sf) to retrieve authentication and instance information for the specified organization. Technical evidence: - In
scripts/get_dlo_schema.pyandscripts/get_dmo_schema.py, theauthenticate_to_orgfunction usessubprocess.run(['sf', 'org', 'display', '--target-org', org_alias, '--json'], ...). - This execution is performed securely using an argument list rather than a shell string, preventing shell injection vulnerabilities.
- [SAFE]: The skill communicates exclusively with official Salesforce REST API endpoints (
/services/data/v64.0/ssot/*) to retrieve schema data. It manages sensitive information, such as OAuth access tokens, by fetching them dynamically from the local Salesforce CLI session and including them in HTTPS request headers. No credentials are hardcoded or exfiltrated to third-party services.
Audit Metadata