Scanned skills

forcedotcom/sf-skills dx-org-devhub-configure

Checked the catalogued skill at dx-org-devhub-configure.

SkillTrust corpus scan 19 September 2026 v0.10.0 via skillsh Verify on GitHub
D AI-triaged 9
D Security

D; retained sample includes a high finding · SD-007 · what this rule accepts as a false positive →

A Permissions

A set by no findings on this axis

A Transparency

A set by no findings on this axis

9 findings
securityhigh SD-007
scripts/devhub.sh
securityhigh SD-007
scripts/devhub.sh
securityhigh SD-007
scripts/devhub.sh
securityhigh SD-007
scripts/devhub.sh
securityhigh SD-007
scripts/devhub.sh
securityhigh SD-007
scripts/devhub.sh
securityhigh SD-007
scripts/devhub.sh
securityhigh SD-007
scripts/test-devhub.sh
securityhigh SD-007
scripts/test-devhub.sh
1 suppressed by AI triage
securitymedium SD-008 benign_example
SKILL.md

The base64-looking string is actually a normal JSON body for a PATCH API request to enable Dev Hub, not obfuscated code.