forcedotcom/sf-skills agentforce-generate

Checked the catalogued skill at agentforce-generate.

SkillTrust corpus scan 7 November 2026 v0.13.0 via skillsh Verify on GitHub

D AI-triaged 39

GitHub

D Security

D; retained sample includes a high finding · SD-007 · what this rule accepts as a false positive →

D Permissions

D set by findings not listed

B Transparency

B; retained sample includes a medium finding · SD-007 · what this rule accepts as a false positive →

showing 10 of 39

transparencymedium SD-007

assets/bundle-meta.xml

securitymedium SD-008

references/agent-metadata-and-lifecycle.md

securitymedium SD-008

references/data-library-reference.md

securitymedium SD-008

references/data-library-reference.md

securitymedium SD-008

references/discover-reference.md

securitymedium SD-012

references/known-issues.md

securityhigh SD-007

references/mcp-management-reference.md

securityhigh SD-007

references/mcp-management-reference.md

securityhigh SD-007

references/mcp-management-reference.md

securityhigh SD-007

references/mcp-management-reference.md

5 suppressed by AI triage

permission_hygienehigh SD-003 benign_example

SKILL.md

The absolute path /tmp/diff-bundle appears only in documentation and does not enable malicious file access.

transparencymedium SD-007 benign_example

assets/agents/production-faq.bundle-meta.xml

Namespace declaration does not execute outbound calls.

securityhigh SD-007 benign_example

references/agent-design-and-spec-creation.md

Descriptive context, no execution.

securityhigh SD-007 benign_example

scripts/generators/remote_site_xml.py

Placeholder config file with no actual outbound network call.

securityhigh SD-007 benign_example

scripts/scaffold.py

The line contains documentation text, not executable code or configuration that would perform outbound network calls.

forcedotcom/sf-skills › agentforce-generate

forcedotcom/sf-skills agentforce-generate