generating-ui-bundle-metadata
Pass
Audited by Gen Agent Trust Hub on Jul 29, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill documents standard Salesforce metadata formats, specifically the
UIBundleandCspTrustedSiteXML structures, which are used to configure internal and external web applications within a Salesforce org. - [SAFE]: All external domain references (such as Google Fonts, Cloudflare, Unsplash, and Mapbox) are provided as legitimate examples for configuring Content Security Policy settings and are recognized as well-known, trusted services.
- [SAFE]: The skill recommends the use of the
sfCLI (Salesforce CLI) for scaffolding new UI bundles, which is the official and standard tool for Salesforce developers. - [SAFE]: The instructions for path safety in
ui-bundle.jsonexplicitly recommend rejecting dangerous characters and sequences (e.g.,.., null characters, and backslashes), demonstrating a commitment to secure configuration practices. - [SAFE]: No evidence of prompt injection, data exfiltration, obfuscation, or unauthorized privilege escalation was found across the analyzed files.
Audit Metadata