salesforce-prod-checklist

Pass

Audited by Gen Agent Trust Hub on Sep 11, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill defines procedures for fetching external data from the Salesforce status API and an application health endpoint to verify deployment readiness.
  • Ingestion points: SKILL.md describes workflows using curl to fetch incident data from api.status.salesforce.com and health status from a user-defined URL (yourapp.com).
  • Boundary markers: The skill does not explicitly define delimiters for parsing the external JSON responses, relying on standard jq processing.
  • Capability inventory: The skill uses the sf CLI for project deployment and testing, and curl for network status checks.
  • Sanitization: The skill body proactively recommends security best practices for the user's code, such as using parameterized SOQL queries to prevent SQL-like injection within the Salesforce environment.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 11, 2026, 01:57 PM