dx-org-shape-manage
Pass
Audited by Gen Agent Trust Hub on Aug 28, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill uses standard, official Salesforce CLI commands (
sf org create shape,sf org list shape,sf org delete shape). All operations are performed via a bash tool using standard flags. The integrated SOQL query for listing inactive shapes targets theShapeRepresentationobject, which is the standard Salesforce object for this feature. The instructions emphasize proper permissioning and security practices, such as ensuringScratchOrgManagementPrefandShapeExportPrefare enabled. The artifact writing logic is a benign utility for capturing command results for evaluation purposes. No sensitive data access or external network calls to untrusted domains were found.
Audit Metadata