generating-flexipage
Pass
Audited by Gen Agent Trust Hub on Jul 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute Salesforce CLI commands (sf) to generate metadata templates and initiate project deployments.\n- [EXTERNAL_DOWNLOADS]: The skill includes instructions to install the Salesforce templates plugin (sf plugins install templates). The Salesforce CLI is an established tool, and the plugin is an official extension for Salesforce development.\n- [PROMPT_INJECTION]: The skill processes *.flexipage-meta.xml files, which serves as an ingestion point for untrusted data that could potentially contain indirect prompt injection instructions.\n
- Ingestion points: Data is read from existing FlexiPage XML files within the project.\n
- Boundary markers: Absent. The skill does not define specific delimiters to isolate untrusted file content.\n
- Capability inventory: The agent has capabilities to execute shell commands and perform file operations.\n
- Sanitization: Absent. There is no evidence of filtering or validation of content read from the XML files.
Audit Metadata