Skills
skills/forcedotcom/sf-skills/building-sf-integrations/Gen Agent Trust Hub

building-sf-integrations

Pass

Audited by Gen Agent Trust Hub on May 14, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill includes shell scripts (e.g., configure-named-credential.sh, set-api-credential.sh) that leverage the Salesforce CLI (sf) to automate metadata deployment and org configuration. These are standard developer tools used for legitimate administrative purposes.\n- [CREDENTIALS_UNSAFE]: One helper script (set-api-credential.sh) provides an option to accept an API key as a command-line argument. While this can lead to secret exposure in shell history, the documentation clearly identifies this as a less secure method and promotes the use of interactive hidden input as the best practice.\n- [COMMAND_EXECUTION]: The script configure-named-credential.sh dynamically generates temporary Apex code and executes it using the Salesforce CLI. This pattern is an established method for programmatic org configuration, specifically for storing encrypted credentials using the Salesforce ConnectApi namespace.
Audit Metadata
Risk Level
SAFE
Analyzed
May 14, 2026, 02:47 PM