dx-org-shape-manage

Pass

Audited by Gen Agent Trust Hub on Oct 15, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes the Bash tool to execute standard Salesforce CLI (sf) commands including org create shape, org list shape, org delete shape, and data query. These operations are well-scoped to the stated purpose of managing Salesforce org shapes.
  • [INDIRECT_PROMPT_INJECTION]: The skill features a capability to ingest and save raw JSON output from CLI commands directly to the local filesystem for evaluation purposes.
  • Ingestion points: Raw stdout responses from sf CLI operations are captured by the agent.
  • Boundary markers: The skill does not employ specific boundary markers or 'ignore' instructions for the captured data before writing it to files.
  • Capability inventory: The skill uses the Bash tool to execute CLI commands and perform file write operations (SKILL.md).
  • Sanitization: The instructions explicitly require the agent to write the 'full, unmodified JSON response' to the disk without sanitization.
  • Assessment: While this creates a surface where data from a remote Salesforce environment is written to the local project directory (force-app/main/adk-eval-output/), this behavior is a standard requirement for developer tool evaluation and does not represent a malicious pattern.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 15, 2026, 12:42 PM