dx-apexguru-scan
Pass
Audited by Gen Agent Trust Hub on Aug 7, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill interacts exclusively with official Salesforce domains (e.g., api.salesforce.com). These are recognized as well-known and trusted service endpoints.
- [SAFE]: Sensitive data management follows security best practices. The skill uses restricted file permissions (chmod 600) for temporary authentication tokens and ensures tokens are never logged, echoed to the console, or passed as command-line arguments.
- [SAFE]: The skill enforces the use of bundled scripts for all operations, including token resolution and API interaction, which provides a controlled and verifiable execution environment.
- [SAFE]: The skill includes a local pre-flight token validation script (validate-token.js) that inspects JWT claims for expiration and scope without performing network calls or executing untrusted code.
Audit Metadata