consumer-goods-rtr-datacloud-export-configure

Pass

Audited by Gen Agent Trust Hub on Oct 7, 2026

Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses child_process.execFileSync to run official Salesforce CLI (sf) commands for authentication, data querying, and environment detection.
  • [DYNAMIC_EXECUTION]: The script render-apex.js generates temporary Apex scripts from local templates by substituting placeholders with configuration values. These scripts are executed via the standard sf apex run command to perform idempotent database updates.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from the user, such as Sales Organization names and KPI Set names. It mitigates injection risks using soql-escape.js, which sanitizes all inputs before they are interpolated into SOQL queries or Apex string literals.
  • [SAFE]: The skill is authored by a trusted vendor and its operations are restricted to the user's authenticated Salesforce environment. It includes clear documentation and requires user authorization for all significant actions.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 7, 2026, 12:20 PM