dx-code-analyzer-custom-rule-create
Pass
Audited by Gen Agent Trust Hub on Aug 19, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a legitimate developer tool for Salesforce ecosystem governance. It facilitates rule authoring for standard engines like PMD, Regex, and ESLint.
- [SAFE]: Bundled Node.js scripts (
create-pmd-rule.jsandcreate-regex-rule.js) are used to automate the modification ofcode-analyzer.ymland the creation of PMD rulesets. These scripts include appropriate logic to escape XPath expressions and sanitize YAML values, mitigating risks associated with malformed configuration files. - [SAFE]: The skill requires standard CLI tools (
sf,node,npm,git) consistent with its purpose. It does not perform any unauthorized network operations or access sensitive system files like credentials or SSH keys. - [SAFE]: All external references and dependencies (such as ESLint plugins and PMD schemas) point to well-known, official, or vendor-owned repositories (e.g., Salesforce, PMD).
Audit Metadata