salesforce-ci-integration
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill configures a pipeline that ingests repository data, representing a standard attack surface for CI systems. Ingestion points: The
actions/checkout@v4step inSKILL.mdallows the workflow to process repository files. Boundary markers: None present; the skill assumes the repository content is trusted. Capability inventory: The skill usessfCLI for deployments, Apex tests, and API limit checks; it also performs file writes for the JWT key. Sanitization: No sanitization is applied to the repository content before execution.\n- [EXTERNAL_DOWNLOADS]: The skill installs the official Salesforce CLI from the npm registry. Automated installation of@salesforce/clioccurs during the workflow execution.\n- [COMMAND_EXECUTION]: The skill leverages official CLI tools to manage Salesforce deployments and repository secrets. Uses thesfCLI for authentication via JWT, project deployment, and test execution. Utilizes theghCLI to programmatically set secrets in GitHub, facilitating secure credential management.
Audit Metadata