salesforce-prod-checklist
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill defines procedures for fetching external data from the Salesforce status API and an application health endpoint to verify deployment readiness.
- Ingestion points:
SKILL.mddescribes workflows usingcurlto fetch incident data fromapi.status.salesforce.comand health status from a user-defined URL (yourapp.com). - Boundary markers: The skill does not explicitly define delimiters for parsing the external JSON responses, relying on standard
jqprocessing. - Capability inventory: The skill uses the
sfCLI for project deployment and testing, andcurlfor network status checks. - Sanitization: The skill body proactively recommends security best practices for the user's code, such as using parameterized SOQL queries to prevent SQL-like injection within the Salesforce environment.
Audit Metadata