preparing-datacloud

Pass

Audited by Gen Agent Trust Hub on May 14, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes sf data360 CLI commands to manage Salesforce Data Cloud resources. It also runs a diagnostic script located at ~/.claude/skills/orchestrating-datacloud/scripts/diagnose-org.mjs to verify environment readiness. These are standard operations for Salesforce administration.
  • [EXTERNAL_DOWNLOADS]: The ingestion API example documentation instructs the user to install standard Python libraries (PyJWT, cryptography, requests) via pip. These are well-known, reputable packages for handling authentication and HTTP requests.
  • [CREDENTIALS_UNSAFE]: The skill follows secure practices by instructing users to store sensitive credentials (like consumer keys and private key paths) in a .env file based on a provided .env.example template, rather than hardcoding them.
  • [DATA_EXPOSURE]: The included send-data.py script reads a local private key file (path specified by the user) to perform JWT-based authentication with Salesforce. Network operations are restricted to official Salesforce login and tenant domains.
Audit Metadata
Risk Level
SAFE
Analyzed
May 14, 2026, 02:47 PM