handling-sf-data

Pass

Audited by Gen Agent Trust Hub on May 14, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes the Salesforce CLI (sf) for various data operations such as sf data query, sf data create/update/delete, and sf data import/export. These are standard commands for Salesforce development and are invoked with appropriate parameters and placeholders as intended by the developer workflow.
  • [REMOTE_CODE_EXECUTION]: The skill utilizes Anonymous Apex via sf apex run to perform server-side data setup and testing. This feature is a documented and primary function of the skill, provided through several templates (e.g., assets/factories/ and assets/bulk/) designed for development and testing environments.
  • [SAFE]: The skill includes extensive documentation and templates for data isolation and cleanup, specifically emphasizing the use of Database.Savepoint, rollback patterns, and ID tracking. These mechanisms are designed to prevent environment pollution and ensure test data does not persist longer than intended.
  • [SAFE]: Guidelines within the skill advise against the use of real PII (Personally Identifiable Information) in test datasets, recommending synthetic data instead to mitigate compliance and security risks during bulk operations.
  • [SAFE]: Local Python scripts (soql_validator.py and validate_data_operation.py) provide static analysis and scoring for data operation files. These scripts are self-contained and do not include network operations, suspicious dependencies, or malicious logic.
Audit Metadata
Risk Level
SAFE
Analyzed
May 14, 2026, 02:47 PM