querying-soql
Pass
Audited by Gen Agent Trust Hub on May 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is designed for developer productivity, providing extensive documentation and templates for Salesforce query authoring. It does not exhibit any malicious behaviors such as prompt injection or data exfiltration.
- [SAFE]: Includes a Python script (
scripts/post-tool-validate.py) intended as a post-tool validation hook. This script performs static analysis on SOQL files using regular expressions to detect common mistakes (e.g., missing WHERE clauses, hardcoded IDs). The script operates locally and does not perform any suspicious network operations or dynamic code execution. - [SAFE]: The skill actively promotes security best practices by instructing the agent to include
WITH SECURITY_ENFORCEDorWITH USER_MODEin generated SOQL queries to ensure they respect Salesforce's security model. - [SAFE]: All references and templates align with standard Salesforce developer practices, focusing on performance, governor limits, and maintainability.
Audit Metadata