generating-flexipage
Pass
Audited by Gen Agent Trust Hub on May 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill exclusively utilizes official Salesforce CLI tools (
sf) and standard metadata patterns for Salesforce development. All operations remain within the vendor's documented ecosystem. - [EXTERNAL_DOWNLOADS]: The skill includes instructions to install the
templatesplugin for the Salesforce CLI (sf plugins install templates). This is a standard, official extension provided by the vendor (Salesforce) for metadata generation. - [COMMAND_EXECUTION]: The agent is instructed to execute CLI commands for template generation and deployment validation (
sf template generate,sf project deploy). These commands are scoped to project files and use official tooling. - [PROMPT_INJECTION]: The skill contains a surface for indirect prompt injection as it reads and parses existing Salesforce FlexiPage XML files to extract identifiers and regions.
- Ingestion points: Reading
*.flexipage-meta.xmlfiles from the local filesystem. - Boundary markers: Absent; no specific delimiters are defined for reading file content.
- Capability inventory: Subprocess execution of
sfCLI commands and filesystem write operations. - Sanitization: The skill provides explicit instructions for manual XML entity encoding to prevent parsing corruption.
- [SAFE]: The specific instructions to "STOP
- No Further Modifications" are technical constraints designed to ensure metadata integrity during the generation process and do not represent a bypass of agent safety protocols.
Audit Metadata