Scanned skills

forcedotcom/sf-skills agentforce-observe

Checked the catalogued skill at agentforce-observe.

SkillTrust corpus scan 7 November 2026 v0.13.0 via skillsh Verify on GitHub
D AI-triaged 28
C Security

C; retained sample includes a medium finding · SD-008 · what this rule accepts as a false positive →

D Permissions

D; retained sample includes a high finding · SD-003 · what this rule accepts as a false positive →

A Transparency

A set by no findings on this axis

showing 10 of 28
securitymedium SD-008
SKILL.md
securitymedium SD-008
SKILL.md
securitymedium SD-008
SKILL.md
permission_hygienehigh SD-003
SKILL.md
permission_hygienehigh SD-003
SKILL.md
permission_hygienehigh SD-003
SKILL.md
permission_hygienehigh SD-003
SKILL.md
permission_hygienehigh SD-003
SKILL.md
permission_hygienehigh SD-003
SKILL.md
securitymedium SD-008
references/ahm-alerts.md
6 suppressed by AI triage
transparencymedium SD-007 benign_example
assets/apex/AgentforceOptimizeService.cls-meta.xml

The endpoint http://soap.sforce.com/2006/04/metadata is a Salesforce internal metadata API, not an outbound malicious call.

permission_hygienehigh SD-003 benign_example
references/improve-reference.md

Documentation file shows no actual path traversal patterns, likely a false positive.

permission_hygienehigh SD-003 benign_example
references/improve-reference.md

Documentation file shows no actual path traversal patterns, likely a false positive.

permission_hygienehigh SD-003 benign_example
references/improve-reference.md

Only empty lines are present; no path traversal evidence.

permission_hygienehigh SD-003 benign_example
references/improve-reference.md

No actual path traversal or absolute paths present in the file.

permission_hygienehigh SD-003 benign_example
references/improve-reference.md

Documentation file shows no actual path traversal patterns, likely a false positive.