experience-ui-bundle-app-coordinate
Pass
Audited by Gen Agent Trust Hub on Aug 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill executes standard development commands such as
npm install,npm run build, andnpx eslintto manage the lifecycle of a React application. - [COMMAND_EXECUTION]: It utilizes the Salesforce CLI (
sf template generate) for project scaffolding and metadata generation, which is the standard tool for Salesforce development. - [COMMAND_EXECUTION]: Local shell scripts (
scripts/check-sfdx-project.shandscripts/check-hosting-target.sh) are used to validate the project structure and configuration. These scripts perform safe operations like checking for the existence of files and validating JSON format using Python's built-injsonmodule. - [EXTERNAL_DOWNLOADS]: The skill triggers
npm install, which downloads project dependencies from the official npm registry. This is a standard and expected operation for React-based projects. - [PROMPT_INJECTION]: The skill includes explicit instructions for the agent to perform 'Requirements Analysis & Planning' (Action #8), which acts as a safety check to identify and resolve conflicting user requirements (e.g., requesting public access while also requiring user-specific data) before proceeding with code generation.
Audit Metadata