agentforce-test

SUSPICIOUS: the skill is largely coherent and uses official Salesforce tooling/endpoints, so it does not look malicious. However, it grants an AI agent meaningful offensive security-testing capability plus direct authenticated action execution that can affect real org data, making overall security risk medium-to-high despite good gating and same-org data flows.