nonprofit-volunteer-management-records-create

Pass

Audited by Gen Agent Trust Hub on Oct 15, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill is authored by the legitimate vendor (forcedotcom) and operates within the expected Salesforce environment using authorized tools like the Salesforce CLI (sf) and headless-360 tools.
  • [SAFE]: It enforces strict user consent protocols, requiring the user to approve data reads and each set of records before they are written to the organization.
  • [SAFE]: Procedural logic for complex data generation and table rendering is offloaded to local Python scripts (expand-series.py and render-review-table.py). This design prevents the LLM from manually crafting execution payloads, effectively mitigating risks associated with accidental data corruption or prompt-based errors.
  • [SAFE]: The skill incorporates self-checks to verify the execution environment and user permissions, ensuring that Volunteer Management features are enabled and the user has the 'Manage Volunteer Data' permission set before proceeding.
  • [SAFE]: Test scripts included in the package perform subprocess calls only to verify the functionality of the skill's own local components, representing standard development and quality assurance practices.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 15, 2026, 01:38 PM