platform-apex-test-generate

Pass

Audited by Gen Agent Trust Hub on Jun 26, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructs the agent to use the sf apex run test command. This is a standard and expected operation within the Salesforce development lifecycle for executing test classes and retrieving coverage results against a target organization.
  • [DATA_EXFILTRATION]: No evidence of unauthorized data exfiltration was found. The skill operates on local source code and interacts with the user's configured Salesforce orgs through official CLI tooling.
  • [REMOTE_CODE_EXECUTION]: The skill does not perform remote code execution or download unverified scripts. It generates Apex code locally based on provided templates and best practice documentation.
  • [PROMPT_INJECTION]: The skill uses instructional language to guide the agent (e.g., 'MANDATORY', 'CORE PRINCIPLES') but does not contain patterns that attempt to bypass safety filters or override system-level instructions in a malicious manner.
  • [SAFE]: The skill is authored by 'forcedotcom' (Salesforce), a trusted entity in this domain. The patterns described (TestDataFactory, HttpCalloutMock, etc.) are standard industry practices for secure and reliable software testing.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 26, 2026, 12:31 PM
Security Audit — agent-trust-hub — platform-apex-test-generate