consumer-goods-rtr-datacloud-export-configure
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
child_process.execFileSyncto run official Salesforce CLI (sf) commands for authentication, data querying, and environment detection. - [DYNAMIC_EXECUTION]: The script
render-apex.jsgenerates temporary Apex scripts from local templates by substituting placeholders with configuration values. These scripts are executed via the standardsf apex runcommand to perform idempotent database updates. - [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from the user, such as Sales Organization names and KPI Set names. It mitigates injection risks using
soql-escape.js, which sanitizes all inputs before they are interpolated into SOQL queries or Apex string literals. - [SAFE]: The skill is authored by a trusted vendor and its operations are restricted to the user's authenticated Salesforce environment. It includes clear documentation and requires user authorization for all significant actions.
Audit Metadata