experience-lwc-generate

Pass

Audited by Gen Agent Trust Hub on Aug 7, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses local automation scripts to facilitate component validation and previewing.
  • scripts/slds_linter_wrapper.py executes the official Salesforce SLDS linter via npx using subprocess.run.
  • scripts/local-dev-preview.sh runs sf CLI commands to initiate local development server sessions for component and site previews.
  • [EXTERNAL_DOWNLOADS]: The skill relies on external developer tools and standard libraries from trusted sources.
  • The validation engine executes the @salesforce-ux/slds-linter package from the public npm registry.
  • Documentation guides users to install necessary development dependencies such as @salesforce/sfdx-lwc-jest and @salesforce/lwc-language-server.
  • [SAFE]: The skill's operations are consistent with professional Salesforce development workflows. No credential theft, persistence mechanisms, or unauthorized network activity were identified.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 7, 2026, 08:50 AM
Security Audit — agent-trust-hub — experience-lwc-generate