sf-flex-estimator
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a local utility for cost estimation and scenario planning for Salesforce Agentforce and Data Cloud. Technical review confirms the following safety factors:
- Command Execution: The included Python scripts (
flex_calculator.py,tier_multiplier.py,validate_estimate.py) use standard libraries for parsing JSON and performing arithmetic. They do not execute arbitrary shell commands or spawn unsafe subprocesses. - Data Security: No evidence of sensitive file access (e.g., SSH keys, environment variables) or network exfiltration patterns was found. The scripts process local JSON templates provided by the user.
- Remote Code: There are no external dependencies, package installations, or remote script fetches. The skill operates entirely within the local environment.
- Prompt Injection: The instructions in
SKILL.mdare purely task-oriented for estimation logic and do not contain patterns designed to bypass agent safety guardrails.
Audit Metadata