The Agent Skills Directory

[SAFE]: The skill implements strict read-only behavior, only executing status queries (sf devops request status) and never performing mutations on the pipeline or Salesforce org state.- [COMMAND_EXECUTION]: Shell script scripts/poll-status.sh is used for status polling. The script is designed with security in mind, rejecting non-numeric inputs for intervals/timeouts and passing tokens via CLI flags rather than string interpolation to prevent command injection.- [DATA_EXPOSURE_AND_EXFILTRATION]: All network operations are directed at official Salesforce CLI endpoints (sf devops). The skill correctly handles JSON output using jq, ensuring sensitive data is not mishandled or leaked to unexpected logs.- [INDIRECT_PROMPT_INJECTION]: The skill processes status messages and error details from the Salesforce API. It mitigates injection risks by treating these values as data to be parsed and reported via a script, rather than interpreting them as instructions for the agent.

dx-devops-request-status