experience-ui-bundle-metadata-generate
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides utility scripts (
check-api-version.shandverify-bundle-location.sh) to automate the verification and update of Salesforce project metadata. These scripts perform routine file system checks and utilizejqfor modifying local project configuration files (sfdx-project.json). All commands are local and serve the primary function of the skill. - [PROMPT_INJECTION]: The instructions incorporate defensive language to ensure that the agent performs mandatory scaffolding steps, providing a logic-based safeguard against user-driven bypasses that could result in a broken project state. This is a functional constraint rather than a security vulnerability.
Audit Metadata