getting-datacloud-schema
Pass
Audited by Gen Agent Trust Hub on May 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill performs legitimate operations to retrieve Salesforce Data Cloud metadata for developer use. All analyzed components adhere to security best practices.
- [COMMAND_EXECUTION]: The scripts safely utilize
subprocess.runwith argument lists to interact with the Salesforce CLI (sf), avoiding shell injection risks. This pattern is used inscripts/get_dlo_schema.pyandscripts/get_dmo_schema.pyto retrieve authentication tokens dynamically. - [EXTERNAL_DOWNLOADS]: The skill uses the
requestslibrary to communicate with official Salesforce API endpoints using the user's authenticated session. These network operations are restricted to the instance URLs provided by the CLI.
Audit Metadata