dx-org-shape-manage
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the Bash tool to execute standard Salesforce CLI (
sf) commands includingorg create shape,org list shape,org delete shape, anddata query. These operations are well-scoped to the stated purpose of managing Salesforce org shapes. - [INDIRECT_PROMPT_INJECTION]: The skill features a capability to ingest and save raw JSON output from CLI commands directly to the local filesystem for evaluation purposes.
- Ingestion points: Raw stdout responses from
sfCLI operations are captured by the agent. - Boundary markers: The skill does not employ specific boundary markers or 'ignore' instructions for the captured data before writing it to files.
- Capability inventory: The skill uses the Bash tool to execute CLI commands and perform file write operations (
SKILL.md). - Sanitization: The instructions explicitly require the agent to write the 'full, unmodified JSON response' to the disk without sanitization.
- Assessment: While this creates a surface where data from a remote Salesforce environment is written to the local project directory (
force-app/main/adk-eval-output/), this behavior is a standard requirement for developer tool evaluation and does not represent a malicious pattern.
Audit Metadata