generating-lightning-app
Pass
Audited by Gen Agent Trust Hub on Jul 29, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides a structured workflow for generating Salesforce metadata based on user requirements. It correctly identifies dependencies and provides clear instructions for validation and error handling.
- [DATA_EXPOSURE]: The skill uses the
salesforce-api-contexttool to retrieve schema information and metadata properties. This is a standard and necessary function for the described purpose and does not involve exfiltration of sensitive user data to unauthorized third parties. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted natural language input from users to define application requirements. While this is an ingestion point, the skill provides validation rules and error handling (e.g., checking for reserved words) to mitigate risks associated with untrusted input during the generation process. The risk is considered low due to the structured nature of the output generation.
Audit Metadata