sf-lwc

Pass

Audited by Gen Agent Trust Hub on Sep 29, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses subprocess.run within scripts/slds_linter_wrapper.py to execute the official Salesforce SLDS linter (@salesforce-ux/slds-linter) via npx. This is an intended functional feature for validating component code quality and adheres to standard development workflows.
  • [EXTERNAL_DOWNLOADS]: The validation scripts may trigger downloads of official Salesforce linting tools and language servers. These references target well-known repositories and packages (e.g., @salesforce/lwc-language-server) from a trusted organization and do not pose a security risk in the context of development activities.
  • [SAFE]: The skill's instructions and scripts follow best practices for Salesforce development, including FLS/CRUD enforcement in Apex templates and accessibility checks in LWC templates. No patterns of prompt injection, data exfiltration, or obfuscation were identified across the 63 files.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 29, 2026, 11:36 AM