The Agent Skills Directory

[SAFE]: The skill implements robust security practices for Salesforce authentication. The scripts/sf-rest.js utility includes a specialized subcommand to verify organization status while explicitly stripping access tokens before outputting to the console, preventing accidental credential exposure.
[SAFE]: All command execution is limited to the local Node.js scripts provided within the skill and the official Salesforce CLI (sf). There are no patterns of remote code execution, external downloads, or shell piping from untrusted sources.
[SAFE]: The data processing logic in scripts/clone-tpe-dashboards.js specifically guards against prototype pollution vulnerabilities by filtering sensitive JavaScript keys (such as __proto__, constructor, and prototype) during its deep-copy operations.
[SAFE]: The skill interacts exclusively with the user's authenticated Salesforce environment. All REST API operations are performed against the instance URL resolved locally from the Salesforce CLI, and no data is exfiltrated to external or third-party domains.

consumer-goods-tpe-dashboard-custom-kpi-configure