experience-ui-bundle-features-generate
Pass
Audited by Gen Agent Trust Hub on Jul 25, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute
npx @salesforce/ui-bundle-featurescommands to list, describe, and install UI components. This is a standard vendor-provided tool from Salesforce. - [EXTERNAL_DOWNLOADS]: The skill uses
npxto fetch and execute the@salesforce/ui-bundle-featurespackage from the npm registry. This package is part of the trusted @salesforce scope. - [PROMPT_INJECTION]: The skill contains an indirect prompt injection surface by processing local project files.
- Ingestion points: The agent reads project source files in the
src/directory and example files provided by the feature installation. - Boundary markers: There are no explicit instructions to the agent to treat file content as data rather than instructions.
- Capability inventory: The skill allows reading and writing files and executing CLI commands.
- Sanitization: No sanitization or verification of the file content is performed before processing.
Audit Metadata