sf-data

Pass

Audited by Gen Agent Trust Hub on Apr 28, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: Detailed analysis of the skill prompt and scripts confirms that all operations are intended for legitimate Salesforce data administration. No malicious code, obfuscation, or exfiltration patterns were identified.- [COMMAND_EXECUTION]: The skill leverages the official sf CLI to perform data operations such as record creation, updates, and SOQL queries. These operations are essential to the skill's functionality and are performed within the user's authenticated session context.- [EXTERNAL_DOWNLOADS]: Installation instructions utilize the platform's standard npx skills command to pull from the vendor's repository (Jaganpro/sf-skills).- [DATA_EXFILTRATION]: The skill includes security-focused validation scripts (hooks/scripts/validate_data_operation.py) that actively scan for PII patterns (SSNs, credit card numbers) to prevent accidental data exposure in Salesforce environments. This acts as a defensive measure rather than an exfiltration risk.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 28, 2026, 07:58 PM