preparing-datacloud

Pass

Audited by Gen Agent Trust Hub on Jul 29, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill uses standard Salesforce CLI commands (sf data360) for Data Cloud management tasks like stream creation and DLO inspection.
  • [SAFE]: The included Python script send-data.py implements a legitimate OAuth 2.0 JWT bearer flow. It correctly handles credentials by reading them from a local .env file (based on .env.example) and performs a staged authentication process to acquire a Data Cloud access token.
  • [SAFE]: Dependencies (PyJWT, cryptography, requests) are standard libraries for the intended purpose of API interaction and JWT signing.
  • [SAFE]: File access is restricted to the skill's own directory (reading .env and PRIVATE_KEY_FILE provided by the user). No unauthorized access to sensitive system paths (e.g., ~/.ssh, ~/.aws) was found.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 29, 2026, 10:01 PM