platform-models-api-configure
Pass
Audited by Gen Agent Trust Hub on Jul 10, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill manages Salesforce API credentials (client ID and secret) using security best practices, such as storing them in a gitignored file with restricted permissions (chmod 600).
- [SAFE]: The bundled authentication script (
scripts/get-orgjwt.sh) implements a secure parsing logic that extracts environment variables without using the dangeroussourceorevalcommands, preventing arbitrary code execution from the configuration file. - [SAFE]: All network operations are directed towards official Salesforce domains (api.salesforce.com) or the user's own Salesforce instance URL. There is no evidence of data exfiltration to unauthorized third parties.
Audit Metadata