sf-integration
Pass
Audited by Gen Agent Trust Hub on Mar 25, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides a comprehensive framework for Salesforce integration architecture, emphasizing the use of Named Credentials and External Credentials to avoid hardcoded secrets in code.
- [COMMAND_EXECUTION]: Helper scripts such as
configure-named-credential.shandset-api-credential.shutilize the Salesforce CLI (sf) to automate org configuration. These scripts generate temporary Apex code to store API keys securely within the target Salesforce org's encrypted credential manager (ConnectApi). - [CREDENTIALS_UNSAFE]: The skill specifically addresses the risk of hardcoded credentials by providing a validation hook (
validate_integration.py) that checks for plaintext secrets in metadata and code files. It encourages secure management via environment variables and encrypted platform stores.
Audit Metadata