preparing-datacloud
Pass
Audited by Gen Agent Trust Hub on May 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill executes
sf data360CLI commands to manage Salesforce Data Cloud resources. It also runs a diagnostic script located at~/.claude/skills/orchestrating-datacloud/scripts/diagnose-org.mjsto verify environment readiness. These are standard operations for Salesforce administration. - [EXTERNAL_DOWNLOADS]: The ingestion API example documentation instructs the user to install standard Python libraries (
PyJWT,cryptography,requests) viapip. These are well-known, reputable packages for handling authentication and HTTP requests. - [CREDENTIALS_UNSAFE]: The skill follows secure practices by instructing users to store sensitive credentials (like consumer keys and private key paths) in a
.envfile based on a provided.env.exampletemplate, rather than hardcoding them. - [DATA_EXPOSURE]: The included
send-data.pyscript reads a local private key file (path specified by the user) to perform JWT-based authentication with Salesforce. Network operations are restricted to official Salesforce login and tenant domains.
Audit Metadata