getting-datacloud-schema

Pass

Audited by Gen Agent Trust Hub on Jul 29, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses the Salesforce CLI (sf) via Python's subprocess.run to manage authentication and retrieve connection details. The scripts use list-based arguments for command execution, which prevents shell injection. This behavior is necessary for the skill's primary function of interacting with Data Cloud.\n- [COMMAND_EXECUTION]: Instructions in SKILL.md direct the agent to execute bundled Python scripts (scripts/get_dlo_schema.py and scripts/get_dmo_schema.py) to fetch metadata. These scripts are safe and perform only the described actions.\n- [EXTERNAL_DOWNLOADS]: The documentation lists requests and pyyaml as prerequisites. These are well-known, trusted libraries from the official Python Package Index (PyPI).
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 29, 2026, 10:01 PM