dx-pkg-post-install-configure
Pass
Audited by Gen Agent Trust Hub on Jul 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: Uses the Salesforce CLI (
sf) to perform legitimate administrative tasks such as querying org information, managing records (CRUD), and deploying metadata modifications. - [EXTERNAL_DOWNLOADS]: Fetches package documentation from external URLs using WebFetch to extract configuration instructions.
- [SAFE]: Incorporates mandatory human-in-the-loop review phases (Phase 4 and 5) where the user must validate extracted steps and approve the execution plan before any automated changes occur, mitigating risks from potentially malicious external documentation.
Audit Metadata