experience-ui-bundle-project-generate

Pass

Audited by Gen Agent Trust Hub on Aug 7, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill utilizes the official Salesforce CLI (sf) for project scaffolding, which is an expected and trusted tool for this vendor (forcedotcom).
  • [COMMAND_EXECUTION]: Shell commands are used for project generation (sf template generate project), file management (mkdir, node, rm), and dependency installation (npm install). All operations are performed within the user-defined destination directory.
  • [SAFE]: The skill includes a local JavaScript utility (scripts/flatten-project.mjs) to relocate generated files to the project root. This script performs standard file system operations (fs.rmSync, fs.renameSync) to ensure the template structure matches the expected root layout.
  • [EXTERNAL_DOWNLOADS]: Dependencies are installed using npm install from the public NPM registry. This is a standard and necessary step for initializing the generated React projects to ensure they are ready for development.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 7, 2026, 07:35 PM
Security Audit — agent-trust-hub — experience-ui-bundle-project-generate