developing-datacloud-code-extension

Pass

Audited by Gen Agent Trust Hub on Jul 29, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Fetches and installs the @salesforce/plugin-data-codeextension plugin for the Salesforce CLI and the salesforce-data-customcode Python SDK from their respective official registries. These are necessary components for interacting with Data Cloud.\n- [COMMAND_EXECUTION]: Utilizes official sf CLI commands to manage the lifecycle of Data Cloud code extensions, including project initialization, permission scanning, and deployment to the cloud environment.\n- [REMOTE_CODE_EXECUTION]: Provides functionality to run Python transformation scripts locally using the Salesforce CLI's test runner. This is an intended feature used to validate logic against Data Cloud data before deployment.\n- [INDIRECT_PROMPT_INJECTION]: The skill manages a workflow where user-supplied Python code in entrypoint.py is executed and deployed. It mitigates potential risks by incorporating a permission scanning phase and encouraging schema validation through the getting-datacloud-schema skill.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 29, 2026, 10:01 PM