developing-datacloud-code-extension
Pass
Audited by Gen Agent Trust Hub on Jul 29, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches and installs the
@salesforce/plugin-data-codeextensionplugin for the Salesforce CLI and thesalesforce-data-customcodePython SDK from their respective official registries. These are necessary components for interacting with Data Cloud.\n- [COMMAND_EXECUTION]: Utilizes officialsfCLI commands to manage the lifecycle of Data Cloud code extensions, including project initialization, permission scanning, and deployment to the cloud environment.\n- [REMOTE_CODE_EXECUTION]: Provides functionality to run Python transformation scripts locally using the Salesforce CLI's test runner. This is an intended feature used to validate logic against Data Cloud data before deployment.\n- [INDIRECT_PROMPT_INJECTION]: The skill manages a workflow where user-supplied Python code inentrypoint.pyis executed and deployed. It mitigates potential risks by incorporating a permission scanning phase and encouraging schema validation through thegetting-datacloud-schemaskill.
Audit Metadata