salesforce-policy-guardrails
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides utility scripts for security auditing and policy enforcement. The shell scripts for pre-commit hooks and GitHub Actions are standard development tools used to search for hardcoded secrets and risky code patterns.
- [CREDENTIALS_UNSAFE]: The skill includes defensive logic to detect and block the accidental commitment of Salesforce credentials and environment variables (e.g.,
SF_PASSWORD,.env), serving as a protective measure rather than a vulnerability. - [COMMAND_EXECUTION]: While the skill contains shell scripts, they are local auditing scripts for use in development environments (pre-commit) or CI pipelines, performing routine security scans.
- [PROMPT_INJECTION]: No malicious override or bypass instructions were detected in the instructions or metadata.
Audit Metadata