salesforce-developer

Pass

Audited by Gen Agent Trust Hub on Jul 3, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill serves as a high-quality development guide, adhering to Salesforce platform security standards including the use of 'with sharing' keywords and 'WITH SECURITY_ENFORCED' clauses for database operations.
  • [SAFE]: Integration examples correctly avoid hardcoded credentials, instead utilizing Salesforce Named Credentials and demonstrating robust error handling and retry logic.
  • [EXTERNAL_DOWNLOADS]: Documentation for CI/CD pipelines includes instructions to download the official Salesforce CLI from the developer.salesforce.com domain, which is an expected and trusted source for development tools.
  • [SAFE]: Dynamic SOQL implementations include proper sanitization using 'String.escapeSingleQuotes' and accessibility checks to mitigate injection risks.
  • [COMMAND_EXECUTION]: Includes standard Salesforce CLI (sf) commands for environment management, testing, and deployment, all of which are routine developer tasks within the Salesforce ecosystem.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 3, 2026, 09:32 AM
Security Audit — agent-trust-hub — salesforce-developer