sf-datacloud

Pass

Audited by Gen Agent Trust Hub on Apr 6, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The script scripts/bootstrap-plugin.sh clones the sf-cli-plugin-data360 runtime from the author's GitHub repository at https://github.com/Jaganpro/sf-cli-plugin-data360.git. This download is a prerequisite for executing Data Cloud commands.
  • [REMOTE_CODE_EXECUTION]: The scripts/bootstrap-plugin.sh script installs and compiles the external plugin using yarn install and npx tsc before linking it to the Salesforce CLI. This execution is part of the intended installation workflow provided by the vendor.
  • [COMMAND_EXECUTION]: The skill utilizes scripts/diagnose-org.mjs and scripts/verify-plugin.sh to execute shell commands. These scripts use spawnSync and bash to run diagnostic probes (sf org display, sf data360 doctor, etc.) against the target Salesforce org to ensure environment compatibility.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 6, 2026, 02:59 PM