dx-org-switch
Pass
Audited by Gen Agent Trust Hub on Aug 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute standard Salesforce CLI commands, including
sf org list,sf config set, andsf config get, to manage environment configuration settings.- [PROMPT_INJECTION]: The skill processes user-supplied organization identifiers or aliases to update configuration settings, which creates a surface for indirect prompt injection. - Ingestion points: User-provided
orgIdentifier(SKILL.md). - Boundary markers: None.
- Capability inventory: Shell command execution via the
sfCLI (SKILL.md). - Sanitization: None specified in the instructions.
Audit Metadata