preparing-datacloud
Pass
Audited by Gen Agent Trust Hub on Jul 29, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill uses standard Salesforce CLI commands (
sf data360) for Data Cloud management tasks like stream creation and DLO inspection. - [SAFE]: The included Python script
send-data.pyimplements a legitimate OAuth 2.0 JWT bearer flow. It correctly handles credentials by reading them from a local.envfile (based on.env.example) and performs a staged authentication process to acquire a Data Cloud access token. - [SAFE]: Dependencies (PyJWT, cryptography, requests) are standard libraries for the intended purpose of API interaction and JWT signing.
- [SAFE]: File access is restricted to the skill's own directory (reading
.envandPRIVATE_KEY_FILEprovided by the user). No unauthorized access to sensitive system paths (e.g.,~/.ssh,~/.aws) was found.
Audit Metadata