salesforce-deploy-integration

Warn

Audited by Gen Agent Trust Hub on Sep 11, 2026

Risk Level: MEDIUMDATA_EXFILTRATIONCOMMAND_EXECUTION
Full Analysis
  • [DATA_EXFILTRATION]: The skill instructs the agent to access a sensitive credential file (server.key) to configure authentication for Salesforce. Evidence: The commands heroku config:set SF_JWT_KEY="$(cat server.key)" and gcloud secrets create sf-jwt-key --data-file=- within SKILL.md read the local private key file.
  • [COMMAND_EXECUTION]: The skill utilizes platform-specific CLI tools to transition secrets and environment variables to production hosting environments. Evidence: Use of heroku config:set, vercel env add, and gcloud secrets for managing application configuration in SKILL.md.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Sep 11, 2026, 01:58 PM