data360-code-extension-generate
Pass
Audited by Gen Agent Trust Hub on Aug 7, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill uses official Salesforce CLI plugins (
@salesforce/plugin-data-code-extension) and Python SDKs (salesforce-data-customcode) from trusted sources. - [SAFE]: Authentication is handled entirely through the official Salesforce CLI (
sf org login), adhering to security best practices by avoiding hardcoded credentials. - [SAFE]: All external downloads (CLI plugins, Python packages) are sourced from official repositories (GitHub) and registries (NPM, PyPI) belonging to the vendor (Salesforce/forcedotcom).
- [SAFE]: The skill includes explicit security and best practice guidance for users, such as avoiding hardcoded credentials and limiting write permissions.
- [SAFE]: The command execution (
sf data-code-extension,pip,docker) is standard for the described development and deployment workflow and does not contain any suspicious or arbitrary code execution patterns.
Audit Metadata