The Agent Skills Directory

[SAFE]: The skill provides a robust framework for Salesforce Flow development. Analysis of the provided Python scripts (doc_generator.py, validate_flow.py, simulate_flow.py) confirms they are limited to local static analysis of XML files and documentation generation. No network exfiltration, hardcoded credentials, or malicious persistence mechanisms were detected.
[INDIRECT_PROMPT_INJECTION]: The skill ingests user-provided Salesforce Flow XML files for validation and documentation purposes. While these files could contain natural language instructions in comments or metadata fields, the skill's logic is dedicated to structural analysis and best-practice scoring rather than executing instructions found within the data. This represents a low-risk surface common to development tools.

sf-flow