sf-data
Pass
Audited by Gen Agent Trust Hub on Apr 28, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: Detailed analysis of the skill prompt and scripts confirms that all operations are intended for legitimate Salesforce data administration. No malicious code, obfuscation, or exfiltration patterns were identified.- [COMMAND_EXECUTION]: The skill leverages the official
sfCLI to perform data operations such as record creation, updates, and SOQL queries. These operations are essential to the skill's functionality and are performed within the user's authenticated session context.- [EXTERNAL_DOWNLOADS]: Installation instructions utilize the platform's standardnpx skillscommand to pull from the vendor's repository (Jaganpro/sf-skills).- [DATA_EXFILTRATION]: The skill includes security-focused validation scripts (hooks/scripts/validate_data_operation.py) that actively scan for PII patterns (SSNs, credit card numbers) to prevent accidental data exposure in Salesforce environments. This acts as a defensive measure rather than an exfiltration risk.
Audit Metadata