generating-lwc-components

Pass

Audited by Gen Agent Trust Hub on May 14, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides legitimate development assets for Salesforce Lightning Web Components, including Apex controllers, LWC templates, and detailed architectural guidance.
  • [COMMAND_EXECUTION]: The hooks/scripts/slds_linter_wrapper.py and hooks/scripts/lwc-lsp-validate.py scripts execute system commands (npx, sf) to run official Salesforce validation and linting tools on the code being edited. This is standard behavior for development-focused AI agent skills to ensure code quality.
  • [EXTERNAL_DOWNLOADS]: The skill references and uses official Salesforce packages from standard package registries (NPM) via the npx command for linting and language server support.
  • [DATA_EXPOSURE]: No sensitive data exposure or exfiltration patterns were detected. The Apex templates provided (assets/apex-controller/LwcController.cls) correctly use security enforcement features like WITH SECURITY_ENFORCED and Security.stripInaccessible() to protect data.
Audit Metadata
Risk Level
SAFE
Analyzed
May 14, 2026, 02:47 PM
Security Audit — agent-trust-hub — generating-lwc-components