integration-connectivity-generate
Pass
Audited by Gen Agent Trust Hub on Aug 7, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The helper scripts
scripts/configure-named-credential.shandscripts/set-api-credential.shutilize the Salesforce CLI (sf) to query org data and deploy configuration. This is a standard and expected behavior for Salesforce development automation tools. - [REMOTE_CODE_EXECUTION]: The script
scripts/configure-named-credential.shdynamically generates Apex code to utilize theConnectApifor secure credential management. This code is executed against the user's target Salesforce org via thesf apex runcommand. The script implements proper escaping of user-provided variables to prevent Apex injection attacks. - [CREDENTIALS_UNSAFE]: While the skill enforces the use of Named Credentials to prevent hardcoded secrets in code, the configuration scripts prompt for and handle sensitive API keys in local shell variables during the setup process. This is the primary intended purpose of these automation helpers for establishing a secure trust between systems.
- [DATA_EXFILTRATION]: The automation scripts transmit API keys to the Salesforce platform to store them in the org's secure credential storage. This data flow is directed solely to the user's authenticated Salesforce environment as part of the intended setup workflow.
Audit Metadata