OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Pass3 providerslatest audit Sep 5, 2026
Independent checks from skills.sh's audit partners.
The skill is safe to use but contains a low-severity risk related to how it handles data from the Salesforce environment. It retrieves information from project files and the Salesforce organization to generate deployment metadata. If malicious content is present in the source organization's metadata (such as UIBundle names), the agent could potentially propagate those instructions into the project's generated files.
Detected behaviors
No alerts
No issues