salesforce-upgrade-migration

Pass

Audited by Gen Agent Trust Hub on Sep 11, 2026

Risk Level: SAFE
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill instructions involve analyzing external Salesforce release notes and API version data. While this presents a surface for processing external content, the risk is minimal as it targets official documentation and internal organization metadata.
  • Ingestion points: Salesforce Release Notes URLs and output from sf org display.
  • Boundary markers: None explicitly defined in the migration template.
  • Capability inventory: The skill utilizes Write and Edit tools to update code files, and Bash to execute npm and sf commands for package management and org introspection.
  • Sanitization: Standard documentation analysis; no automated sanitization is required for these manual upgrade steps.
  • [EXTERNAL_DOWNLOADS]: The skill provides instructions to download the jsforce package from the official NPM registry and references official Salesforce documentation and GitHub release pages.
  • Evidence: Instructions include npm install jsforce@latest and links to help.salesforce.com and github.com/jsforce/jsforce.
  • [COMMAND_EXECUTION]: The skill uses standard CLI tools for development workflows, such as npm for package management, git for version control, and sf (Salesforce CLI) for interacting with Salesforce environments.
  • Evidence: Usage of npm list, npm install, sf org display, and git checkout commands are documented as part of the migration process.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 11, 2026, 01:57 PM