segmenting-datacloud
Pass
Audited by Gen Agent Trust Hub on Jul 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
sf data360CLI commands and a local Node.js diagnostic script to interact with Salesforce Data Cloud. These are routine operations for the task. - [EXTERNAL_DOWNLOADS]: It identifies a dependency on an external Salesforce CLI plugin but does not trigger any remote downloads or execution of external code.
- [PROMPT_INJECTION]: The skill processes external SQL and JSON files, which is a standard surface for indirect prompt injection. [Ingestion points]:
segment.jsonandci.json. [Boundary markers]: None. [Capability inventory]: Shell command execution and database access. [Sanitization]: No sanitization is implemented for input file content.
Audit Metadata