salesforce-multi-env-setup
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill follows security best practices by recommending the use of environment variables (
.env.local) and dedicated secret management solutions such as HashiCorp Vault, AWS Secrets Manager, and GCP Secret Manager rather than hardcoding sensitive information. - [COMMAND_EXECUTION]: The skill uses
allowed-toolsto restrict the Bash environment to specific, necessary CLI tools (sf,gcloud,vault), implementing the principle of least privilege for command execution. - [SAFE]: Includes 'Environment Guards' in the provided code snippets designed to prevent accidental execution of destructive operations (like data resets) against production environments based on environment configuration.
Audit Metadata