dx-devops-project-manage
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes
sf devops projectcommands through shell scripts in thescripts/directory. These operations (list, create, update) are fundamental to the skill's purpose and are performed using the official Salesforce CLI. - [COMMAND_EXECUTION]: The skill uses
jqto parse JSON output from the Salesforce CLI, which is a standard practice for headless automation and does not introduce security risks in this context. - [SAFE]: Org authentication is verified using
sf org display --jsonbefore operations, and the skill correctly instructs the user to authenticate manually if needed, avoiding credential handling within the skill itself. - [SAFE]: The skill implements idempotency in
scripts/create-project.shby checking for existing projects before creation, reducing the risk of accidental duplicate resource creation.
Audit Metadata