Scanned skills

forcedotcom/sf-skills dx-org-devhub-configure

Checked the catalogued skill at dx-org-devhub-configure.

SkillTrust corpus scan 7 November 2026 v0.13.0 via skillsh Verify on GitHub
D AI-triaged 1
D Security

D; retained sample includes a high finding · SD-007 · what this rule accepts as a false positive →

A Permissions

A set by no findings on this axis

A Transparency

A set by no findings on this axis

1 finding
securityhigh SD-007
scripts/test-devhub.sh
5 suppressed by AI triage
securitymedium SD-008 benign_example
SKILL.md

The snippet contains only standard Salesforce CLI commands, no base64 encoded data.

securitymedium SD-008 benign_example
SKILL.md

The snippet is a normal PATCH request to Salesforce Tooling API, not a base64 obfuscation.

securityhigh SD-007 benign_example
scripts/devhub.sh

The script only echoes a URL in a user instruction, not performing an outbound network call.

securityhigh SD-007 benign_example
scripts/devhub.sh

The script writes an XML file containing a namespace; it does not make external requests.

securityhigh SD-007 benign_example
scripts/test-devhub.sh

The file is a documentation text with no executable code or config that would enable outbound network calls.