activating-datacloud
Pass
Audited by Gen Agent Trust Hub on May 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill executes several commands using the
sfCLI (Salesforce CLI) with thedata360plugin to manage activations, targets, and data actions. - [COMMAND_EXECUTION]: It invokes a local Node.js diagnostic script located at
~/.claude/skills/orchestrating-datacloud/scripts/diagnose-org.mjsto verify environment readiness before performing mutations. - [EXTERNAL_DOWNLOADS]: The skill documentation specifies a dependency on an external community CLI plugin (
sf data360). While this is an external dependency, it is a standard extension for the Salesforce developer ecosystem intended for managing Data Cloud resources. - [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection (Category 8) as it interpolates user-provided organization aliases and file paths directly into CLI commands.
- Ingestion points: User-provided
<org>alias and configuration file names (e.g.,target.json). - Boundary markers: No explicit delimiters or boundary markers are used in the command templates.
- Capability inventory: Execution of shell commands via
sfandnodeas defined inSKILL.md. - Sanitization: There is no explicit sanitization logic described within the skill for the user-provided arguments.
Audit Metadata