salesforce-upgrade-migration
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructions involve analyzing external Salesforce release notes and API version data. While this presents a surface for processing external content, the risk is minimal as it targets official documentation and internal organization metadata.
- Ingestion points: Salesforce Release Notes URLs and output from
sf org display. - Boundary markers: None explicitly defined in the migration template.
- Capability inventory: The skill utilizes
WriteandEdittools to update code files, andBashto executenpmandsfcommands for package management and org introspection. - Sanitization: Standard documentation analysis; no automated sanitization is required for these manual upgrade steps.
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to download the
jsforcepackage from the official NPM registry and references official Salesforce documentation and GitHub release pages. - Evidence: Instructions include
npm install jsforce@latestand links tohelp.salesforce.comandgithub.com/jsforce/jsforce. - [COMMAND_EXECUTION]: The skill uses standard CLI tools for development workflows, such as
npmfor package management,gitfor version control, andsf(Salesforce CLI) for interacting with Salesforce environments. - Evidence: Usage of
npm list,npm install,sf org display, andgit checkoutcommands are documented as part of the migration process.
Audit Metadata