sf-datacloud-prepare

Warn

Audited by Socket on Apr 6, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill’s capabilities are largely consistent with its stated Salesforce Data Cloud preparation purpose, and data flows appear directed to Salesforce tooling. The main concern is install/execution trust: it depends on an unspecified external community CLI plugin whose provenance is not established in the skill, creating medium supply-chain risk. No clear credential theft, exfiltration, or covert behavior is present.

Confidence: 82%Severity: 58%
Audit Metadata
Analyzed At
Apr 6, 2026, 02:58 PM
Package URL
pkg:socket/skills-sh/Jaganpro%2Fsf-skills%2Fsf-datacloud-prepare%2F@c540eb8f2f1b27115938cec33df6d4781bbd69e2