experience-ui-bundle-deploy
Pass
Audited by Gen Agent Trust Hub on Jun 26, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill documents a legitimate development and deployment process for Salesforce projects. It includes steps for authentication, building project assets, deploying metadata via standard CLI tools, and post-deployment configuration like permission assignment and GraphQL schema generation.
- [COMMAND_EXECUTION]: The skill describes executing commands for Salesforce CLI operations (deploying metadata, fetching schemas) and building UI bundles (dependency installation). These are standard developer operations and do not involve suspicious privilege escalation or unauthorized system access.
- [INDIRECT_PROMPT_INJECTION]: The skill operates on project files such as sfdx-project.json and package.xml. While it ingests this data to determine deployment logic, the operations are focused on standard Salesforce metadata APIs and do not expose an attack surface for instruction override. Boundary markers are inherent to the CLI tools used for these operations.
Audit Metadata