sf-lwc
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
subprocess.runwithinscripts/slds_linter_wrapper.pyto execute the official Salesforce SLDS linter (@salesforce-ux/slds-linter) vianpx. This is an intended functional feature for validating component code quality and adheres to standard development workflows. - [EXTERNAL_DOWNLOADS]: The validation scripts may trigger downloads of official Salesforce linting tools and language servers. These references target well-known repositories and packages (e.g.,
@salesforce/lwc-language-server) from a trusted organization and do not pose a security risk in the context of development activities. - [SAFE]: The skill's instructions and scripts follow best practices for Salesforce development, including FLS/CRUD enforcement in Apex templates and accessibility checks in LWC templates. No patterns of prompt injection, data exfiltration, or obfuscation were identified across the 63 files.
Audit Metadata