fetching-salesforce-docs
Pass
Audited by Gen Agent Trust Hub on May 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/runtime_bootstrap.pyutilizesos.execvefor process re-execution. This is an environment management technique used to ensure the extraction scripts run within a dedicated virtual environment (~/.claude/.fetching-salesforce-docs-runtime/venv) where required dependencies like Playwright are installed.- [EXTERNAL_DOWNLOADS]: The skill requires the Playwright Chromium browser binary to render documentation pages. Per the documentation, this binary is automatically downloaded and managed within the skill's isolated runtime directory during installation.- [SAFE]: The extraction scripts implement robust hostname validation to ensure that browser-based fetching is strictly limited to official Salesforce-owned domains, such ashelp.salesforce.comanddeveloper.salesforce.com. This prevents the skill from being misused for unauthorized network operations.
Audit Metadata