OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Pass3 providerslatest audit Aug 19, 2026
Independent checks from skills.sh's audit partners.
The skill automates the end-to-end upgrade of Einstein Bots to Agentforce agents using the Salesforce CLI. It is generally safe for developer use, though it features an autonomous mode that bypasses user review and lacks explicit sanitization when processing bot metadata, creating a surface for indirect prompt injection.
Detected behaviors
No alerts
No issues