dx-devops-pipeline-manage
Pass
Audited by Gen Agent Trust Hub on Aug 7, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the Salesforce CLI (
sf) andjqto perform administrative tasks. Operations are performed locally using the user's authenticated session. Commands are properly structured with JSON output flags for reliable parsing. - [EXTERNAL_DOWNLOADS]: No remote scripts or unverified binary downloads were detected. The skill relies on standard system tools (
bash,jq) and the official Salesforce CLI toolset. - [DATA_EXFILTRATION]: There is no evidence of unauthorized data transfer. The skill interacts only with the target Salesforce org and the specified Git repositories (GitHub/Bitbucket) as intended for DevOps pipeline management.
- [REMOTE_CODE_EXECUTION]: No remote code execution patterns were found. All scripts included in the skill (
validate-org-type.sh,check-activation-ready.sh,verify-operation.sh) are local shell scripts used for input validation and post-operation verification.
Audit Metadata