dx-code-analyzer-configure

Pass

Audited by Gen Agent Trust Hub on Jun 26, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill manages the installation of the Salesforce CLI (@salesforce/cli) and the Code Analyzer plugin (@salesforce/plugin-code-analyzer) from the vendor's official registries. It also references well-known development services such as SDKMAN and NVM for managing language environments.
  • [COMMAND_EXECUTION]: Local shell scripts perform environmental diagnostics, such as checking for the presence of Java, Node.js, and Python, and verifying the versions of installed Salesforce CLI plugins. These commands are executed to ensure the environment is correctly configured for scanning.
  • [CREDENTIALS_UNSAFE]: A diagnostic script executes sf org display to check for an authenticated Salesforce organization, which is a functional requirement for the ApexGuru engine. The script processes the command's output locally to confirm connectivity and does not transmit authentication tokens externally.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 26, 2026, 12:31 PM
Security Audit — agent-trust-hub — dx-code-analyzer-configure