consumer-goods-tpe-dashboard-custom-kpi-configure
Pass
Audited by Gen Agent Trust Hub on Sep 2, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill demonstrates secure credential handling by using the Salesforce CLI's established authentication. It utilizes a helper script,
sf-rest.js, designed to fetch access tokens and interact with APIs without printing sensitive credentials to logs or standard output. - [SAFE]: The dashboard cloning script,
clone-tpe-dashboards.js, includes explicit safeguards against prototype pollution by filtering out unsafe keys like__proto__andconstructorduring deep-copy operations of dashboard metadata. - [SAFE]: All command execution is limited to the local environment, specifically using the official Salesforce CLI (
sf) and the Node.js runtime. No remote scripts are downloaded or executed during the lifecycle of the skill. - [SAFE]: The skill communicates only with official Salesforce REST endpoints using a pinned API version (v67.0), ensuring a predictable and secure communication channel for metadata management.
Audit Metadata