dx-devops-test-pipeline-configure
Pass
Audited by Gen Agent Trust Hub on Aug 7, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill follows secure operational patterns by requiring user confirmation for all write operations and resolving necessary identifiers through authenticated queries to the Salesforce environment.
- [COMMAND_EXECUTION]: The skill uses the Salesforce CLI (sf) to interact with org data via sf data query, sf data create, sf data update, and sf api request. These operations are standard for Salesforce development and stay within the intended scope of managing DevOps infrastructure.
- [EXTERNAL_DOWNLOADS]: The skill references the installation of @salesforce/plugin-agent, which is an official Salesforce CLI plugin. This is a legitimate dependency for the described functionality.
- [PROMPT_INJECTION]: An analysis of indirect prompt injection surfaces (Category 8) was performed. Ingestion points: Salesforce org records retrieved via sf data query. Boundary markers: Absent. Capability inventory: sf data create, sf data update, and sf api request (POST). Sanitization: Absent. This surface is evaluated as safe given the trusted source (Salesforce org) and the intended administrative use case.
Audit Metadata