dx-code-analyzer-configure

Pass

Audited by Gen Agent Trust Hub on Sep 3, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill is designed to assist developers with the setup and tuning of Salesforce Code Analyzer. It employs standard CLI interactions and local configuration management without exhibiting malicious behavior.\n- [EXTERNAL_DOWNLOADS]: The skill facilitates the installation of official Salesforce developer tools and plugins from trusted registries like NPM. It also provides templates for CI/CD integration using the vendor's official GitHub Actions.\n- [COMMAND_EXECUTION]: The skill performs command execution through shell scripts and CLI invocations to check prerequisites and validate configuration. These actions are limited to standard development tools and include validation steps to ensure integrity.\n- [INDIRECT_PROMPT_INJECTION]: The skill handles project configuration files and user-defined rule names. It uses structured YAML validation and safe loading practices in its utility scripts to minimize the risk of processing malicious inputs.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 3, 2026, 05:02 AM
Security Audit — agent-trust-hub — dx-code-analyzer-configure