data360-activate

SUSPICIOUS. The skill’s behavior largely matches its stated Salesforce Data Cloud activation purpose, and no explicit credential theft or covert exfiltration is shown. However, its core capability depends on an external community `sf data360` plugin whose provenance and official distribution path are not verifiable from the provided evidence, creating a meaningful supply-chain trust gap.