salesforce-ci-integration

Pass

Audited by Gen Agent Trust Hub on Sep 11, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill configures a pipeline that ingests repository data, representing a standard attack surface for CI systems. Ingestion points: The actions/checkout@v4 step in SKILL.md allows the workflow to process repository files. Boundary markers: None present; the skill assumes the repository content is trusted. Capability inventory: The skill uses sf CLI for deployments, Apex tests, and API limit checks; it also performs file writes for the JWT key. Sanitization: No sanitization is applied to the repository content before execution.\n- [EXTERNAL_DOWNLOADS]: The skill installs the official Salesforce CLI from the npm registry. Automated installation of @salesforce/cli occurs during the workflow execution.\n- [COMMAND_EXECUTION]: The skill leverages official CLI tools to manage Salesforce deployments and repository secrets. Uses the sf CLI for authentication via JWT, project deployment, and test execution. Utilizes the gh CLI to programmatically set secrets in GitHub, facilitating secure credential management.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 11, 2026, 01:57 PM