sf-lwc
Pass
Audited by Gen Agent Trust Hub on Apr 27, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes Python scripts within the
hooks/directory, such asslds_linter_wrapper.pyandlwc-lsp-validate.py, to execute external development utilities. These scripts call the official Salesforce SLDS linter and LWC language server usingsubprocess.run. This is expected functionality for a development skill to provide real-time code quality and compliance feedback. - [SAFE]: The skill emphasizes secure development practices throughout its provided templates and documentation. For example, Apex controller templates (
assets/apex-controller/LwcController.cls) implement mandatory field-level security (FLS) enforcement usingWITH SECURITY_ENFORCEDandSecurity.stripInaccessible. All external software dependencies, such as@salesforce/*packages and CLI plugins, are well-known and trusted resources within the Salesforce developer community.
Audit Metadata