omnistudio-flexcard-generate
Pass
Audited by Gen Agent Trust Hub on Aug 19, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is authored by 'forcedotcom' (Salesforce) and strictly adheres to standard Salesforce development workflows, utilizing the official 'sf' CLI for all deployment and query operations.
- [COMMAND_EXECUTION]: The provided scripts contain standard Salesforce CLI commands (sf data query, sf project deploy) intended for interacting with an authenticated Salesforce org. There are no patterns of arbitrary or malicious shell execution.
- [DATA_EXPOSURE]: No hardcoded credentials, API keys, or sensitive file paths (such as .ssh or .env) were detected. The skill recommends using Salesforce Named Credentials for external API interactions, which is a secure practice.
- [EXTERNAL_DOWNLOADS]: The skill does not perform any external downloads or package installations. All external references point to official Salesforce Trailhead and Developer documentation.
- [PROMPT_INJECTION]: The instructions focus on structured metadata generation and validation using a predefined 130-point rubric. There are no attempts to bypass safety filters or override the agent's core behavioral constraints.
Audit Metadata