OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Warn3 providerslatest audit Jun 19, 2026
Independent checks from skills.sh's audit partners.
The skill provides a workflow for the Salesforce Code Analyzer CLI. A vulnerability in the bundled describe-rule.js script allows for potential command injection via unsanitized user input. Additionally, the skill's file-fixing functionality presents an indirect prompt injection surface if malicious scan results are processed.
Detected behaviors
2 alerts: gptSecurity
No issues