dx-org-devhub-configure
Pass
Audited by Gen Agent Trust Hub on Aug 14, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses a bundled Bash script (
scripts/devhub.sh) to interface with the Salesforce CLI (sf). - The script implements strict input validation, such as verifying that
--instance-urltargets only official Salesforce-owned hostnames (salesforce.com,force.com,salesforce.mil). - It enforces absolute path execution for the helper script to prevent path traversal or execution of unintended files in the user's current directory.
- A dry-run mechanism is used by default for configuration changes, requiring an explicit
--applyflag for destructive or irreversible actions like enabling Dev Hub.
Audit Metadata