activating-datacloud

Warn

Audited by Socket on May 14, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS: The skill’s capabilities largely match its stated Salesforce Data Cloud activation purpose, and its data flows appear aligned with Salesforce CLI usage. However, it relies on an external community data360 plugin that could not be verified as official Salesforce-owned, creating a significant supply-chain trust gap for a skill that can mutate live business-system assets.

Confidence: 84%Severity: 72%
Audit Metadata
Analyzed At
May 14, 2026, 02:16 PM
Package URL
pkg:socket/skills-sh/forcedotcom%2Fsf-skills%2Factivating-datacloud%2F@6ca8753650645ee197c64c02bcb09ae957f1da42