experience-lds-graphql-generate
Pass
Audited by Gen Agent Trust Hub on Aug 14, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses two bash scripts (
fetch-lds-graphql-schema.shandtest-lds-graphql-query.sh) to interact with the Salesforce CLI (sf). These scripts execute shell commands to perform GraphQL introspection and query testing. - Evidence:
sf api request restis used for authenticated API calls. - Mitigation: The scripts implement specific security controls:
fetch-lds-graphql-schema.shuses a Python-based realpath check to prevent directory traversal (refusing to write outside the current working directory), andtest-lds-graphql-query.shincludes a 'Mutation Guard' that prevents accidental execution of write operations (mutations) unless explicitly enabled via an environment variable.
Audit Metadata