querying-soql

Pass

Audited by Gen Agent Trust Hub on May 14, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill is designed for developer productivity, providing extensive documentation and templates for Salesforce query authoring. It does not exhibit any malicious behaviors such as prompt injection or data exfiltration.
  • [SAFE]: Includes a Python script (scripts/post-tool-validate.py) intended as a post-tool validation hook. This script performs static analysis on SOQL files using regular expressions to detect common mistakes (e.g., missing WHERE clauses, hardcoded IDs). The script operates locally and does not perform any suspicious network operations or dynamic code execution.
  • [SAFE]: The skill actively promotes security best practices by instructing the agent to include WITH SECURITY_ENFORCED or WITH USER_MODE in generated SOQL queries to ensure they respect Salesforce's security model.
  • [SAFE]: All references and templates align with standard Salesforce developer practices, focusing on performance, governor limits, and maintainability.
Audit Metadata
Risk Level
SAFE
Analyzed
May 14, 2026, 02:15 PM