services-extension-consumption
Pass
Audited by Gen Agent Trust Hub on Sep 2, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill provides documentation for
TerminalService.simpleExec, which allows executing shell commands. This is used for integration with the Salesforce CLI (sf) and includes built-in handling for environment variables likeSF_LOG_LEVELandSF_DISABLE_TELEMETRY. - [DATA_EXPOSURE_AND_EXFILTRATION]: Documents access to the
ConnectionServiceandSettingsService, which manage Salesforce authentication tokens and instance URLs. These are standard operations for Salesforce development tools to facilitate secure communication with the platform. - [DYNAMIC_EXECUTION]: Mentions
FsService.readJSONwhich usesEffect.Schemafor validated deserialization. This is a secure practice to prevent issues with corrupted or malicious JSON data from external sources. - [INDIRECT_PROMPT_INJECTION]: The skill describes methods for ingesting workspace data such as
sfdx-project.jsonand metadata manifests. While this represents a data ingestion surface, the documentation encourages the use of structured schemas and standard Salesforce APIs, which include their own validation layers.
Audit Metadata