The Agent Skills Directory

[SAFE]: The skill provides instructions for managing Salesforce Connected App credentials using a local environment file. It correctly advises the user to set restrictive file permissions (chmod 600) and to ensure the file is excluded from version control via .gitignore, which are standard security practices to prevent credential exposure.
[SAFE]: The authentication helper script scripts/get-orgjwt.sh implements defensive programming by manually parsing the environment file for specific configuration keys. By avoiding the source command, it effectively prevents the risk of arbitrary shell code execution that could occur if a configuration file were tampered with.
[SAFE]: All network operations performed by the skill are directed towards legitimate Salesforce infrastructure (api.salesforce.com and user-provided Salesforce org instances) for the necessary purpose of token exchange and API connectivity.

platform-models-api-configure