salesforce-local-dev-loop
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill guides the user through setting up a standard Salesforce DX project using the official Salesforce CLI (
sf). - [SAFE]: Instructions for secret management follow best practices by recommending the use of
.env.localfiles and indicating they should be git-ignored. - [SAFE]: The skill uses well-known, trusted tools and libraries such as
@salesforce/cli,jsforce,vitest, andtsx. - [SAFE]: The
allowed-toolssection correctly limits the shell environment to specific trusted package managers (npm,pnpm) and the Salesforce CLI (sf), which is an appropriate application of the principle of least privilege. - [SAFE]: External links point to official Salesforce developer documentation and established open-source project sites (jsforce.github.io, vitest.dev).
Audit Metadata