platform-apex-generate
Pass
Audited by Gen Agent Trust Hub on Aug 19, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements a robust security model for Apex generation, including hard-stop constraints that mandate the use of sharing keywords, bind variables for SOQL to prevent injection, and the use of Named Credentials for external APIs.
- [SAFE]: The workflow requires the invocation of validation tools, specifically the Salesforce Code Analyzer and Apex unit tests, before reporting results. This ensures that generated code is scanned for vulnerabilities and verified for functional correctness.
- [SAFE]: The provided templates follow secure coding practices such as enforcing CRUD/FLS via USER_MODE and validating input parameters in REST resources using regular expressions.
- [SAFE]: No malicious patterns such as obfuscation, unauthorized data access, or hidden remote code execution were identified in the instructions or assets.
Audit Metadata