Scanned skills

forcedotcom/sf-skills experience-ui-bundle-2gp-deploy

Checked the catalogued skill at experience-ui-bundle-2gp-deploy.

SkillTrust corpus scan 7 November 2026 v0.13.0 via skillsh Verify on GitHub
C AI-triaged 2
C Security

C; retained sample includes a medium finding · SD-008 · what this rule accepts as a false positive →

A Permissions

A set by no findings on this axis

A Transparency

A set by no findings on this axis

2 findings
securitymedium SD-008
SKILL.md
securitymedium SD-008
SKILL.md
2 suppressed by AI triage
transparencymedium SD-007 benign_example
assets/CustomApplication.app-meta.xml

The file only declares a Salesforce SOAP endpoint in an XML schema; it does not contain an actual outbound network call or permission grant.

transparencymedium SD-007 benign_example
assets/PermissionSet.permissionset-meta.xml

The XML contains a standard Salesforce metadata endpoint, not a permission grant for outbound network calls.