getting-datacloud-schema
Pass
Audited by Gen Agent Trust Hub on Jul 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the Salesforce CLI (
sf) via Python'ssubprocess.runto manage authentication and retrieve connection details. The scripts use list-based arguments for command execution, which prevents shell injection. This behavior is necessary for the skill's primary function of interacting with Data Cloud.\n- [COMMAND_EXECUTION]: Instructions inSKILL.mddirect the agent to execute bundled Python scripts (scripts/get_dlo_schema.pyandscripts/get_dmo_schema.py) to fetch metadata. These scripts are safe and perform only the described actions.\n- [EXTERNAL_DOWNLOADS]: The documentation listsrequestsandpyyamlas prerequisites. These are well-known, trusted libraries from the official Python Package Index (PyPI).
Audit Metadata