platform-encryption-configure
Pass
Audited by Gen Agent Trust Hub on Jul 17, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill includes and instructs the agent to run a local shell script
scripts/validate-encryption-metadata.sh. This script is used to validate that generated Salesforce metadata adheres to platform rules, such as dependency requirements between Cache-Only Keys and replay detection. The script's operations are limited to string matching usinggrepandsedon local files and do not involve network access or privilege escalation. - [DATA_EXPOSURE]: The skill manages Salesforce DX metadata configuration. It does not access sensitive user credentials, private keys, or environment variables. Placeholders used in templates (e.g.,
{FIELD_API_NAME}) are standard for metadata generation and do not expose sensitive information. - [INDIRECT_PROMPT_INJECTION]: While the skill ingests untrusted user data such as field names and labels, it employs strict enum validation and a structured XML template system. The presence of a validation script further mitigates the risk of malformed or malicious data being incorporated into the final output.
Audit Metadata