experience-cms-content-render
Pass
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the Salesforce CLI (
sf project retrieve) to fetch metadata related to CMS content types and usesnpmto manage package installations. - [EXTERNAL_DOWNLOADS]: The skill installs the official
@salesforce/ui-bundle-template-feature-cms-toolkitpackage to provide the core delivery and transport logic for CMS content. - [INDIRECT_PROMPT_INJECTION]: Because the skill renders content fetched from a CMS, it handles untrusted RichText data. The skill mitigates this by enforcing specific rules for decoding and sanitizing HTML, such as using Angular's native
DomSanitizeror providing a dedicated sanitization hook for React components (e.g., for use with DOMPurify).
Audit Metadata