salesforce-developer

Pass

Audited by Gen Agent Trust Hub on Jun 14, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides standard development patterns for the Salesforce platform. It includes comprehensive guidance on Apex development, Lightning Web Components, SOQL/SOSL optimization, and CI/CD pipelines.
  • [EXTERNAL_DOWNLOADS]: The skill's CI/CD examples in references/deployment-devops.md include instructions to download the Salesforce CLI from the official Salesforce developer domain (developer.salesforce.com). This is a well-known and trusted source for development tooling.
  • [COMMAND_EXECUTION]: Provides standard shell scripts for Salesforce DX operations and CI/CD workflows. These scripts use the Salesforce CLI (sf) for common development tasks like authentication, source deployment, and testing.
  • [SAFE]: Dynamic SOQL and SOSL examples in references/soql-sosl.md include proper sanitization using String.escapeSingleQuotes and security enforcement with the WITH SECURITY_ENFORCED clause to prevent injection and honor field-level security.
  • [SAFE]: The skill correctly advises against hardcoding credentials and demonstrates the use of Salesforce Named Credentials and environment variables for secure authentication in integration and CI/CD scenarios.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 14, 2026, 10:32 AM
Security Audit — agent-trust-hub — salesforce-developer