activating-datacloud

Pass

Audited by Gen Agent Trust Hub on May 14, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes several commands using the sf CLI (Salesforce CLI) with the data360 plugin to manage activations, targets, and data actions.
  • [COMMAND_EXECUTION]: It invokes a local Node.js diagnostic script located at ~/.claude/skills/orchestrating-datacloud/scripts/diagnose-org.mjs to verify environment readiness before performing mutations.
  • [EXTERNAL_DOWNLOADS]: The skill documentation specifies a dependency on an external community CLI plugin (sf data360). While this is an external dependency, it is a standard extension for the Salesforce developer ecosystem intended for managing Data Cloud resources.
  • [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection (Category 8) as it interpolates user-provided organization aliases and file paths directly into CLI commands.
  • Ingestion points: User-provided <org> alias and configuration file names (e.g., target.json).
  • Boundary markers: No explicit delimiters or boundary markers are used in the command templates.
  • Capability inventory: Execution of shell commands via sf and node as defined in SKILL.md.
  • Sanitization: There is no explicit sanitization logic described within the skill for the user-provided arguments.
Audit Metadata
Risk Level
SAFE
Analyzed
May 14, 2026, 02:15 PM