dx-devops-pipeline-manage
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes
sf devopsandsf orgCLI commands to manage Salesforce DevOps Center pipelines and authenticate with orgs. These are standard operations for managing Salesforce development infrastructure and are performed within the scope of authorized developer tools. - [SAFE]: The skill uses local helper scripts (
scripts/validate-org-type.sh,scripts/check-activation-ready.sh, andscripts/verify-operation.sh) to perform deterministic validation of inputs and command results. These scripts use standard shell utilities (bash,jq) and do not perform any network operations or access sensitive system files beyond the Salesforce CLI's own configuration. - [SAFE]: Instructions for creating pipelines correctly distinguish between existing and new Git repositories, ensuring that provider-specific flags (e.g.,
--repo-ownerfor GitHub) are handled appropriately according to the platform's requirements. - [SAFE]: The skill implements a 'check-before-create' pattern using
jqto avoid duplicate resource creation, which is a recommended best practice for idempotent CLI automation.
Audit Metadata