sf-testing
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides legitimate instructions for Salesforce development and testing workflows, utilizing standard tools and best practices.
- [EXTERNAL_DOWNLOADS]: Fetches documentation from Salesforce's official developer portal (
developer.salesforce.com), which is a well-known and trusted service for this context. - [COMMAND_EXECUTION]: Provides templates for standard Salesforce CLI tools (
sf,sfcc-ci) and Node.js test runners (npm test,jest). The commands use environment variables for sensitive parameters like sandbox identifiers and test run IDs, which is a secure practice. - [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to ingest external data from web searches and fetches to retrieve live documentation. While this creates an ingestion surface, the target sources are technical documentation and the skill does not suggest automated execution of the retrieved content.
Audit Metadata