Scanned skills

forcedotcom/sf-skills platform-data-and-tooling-api-context-get

Checked the catalogued skill at platform-data-and-tooling-api-context-get.

SkillTrust corpus scan 7 November 2026 v0.13.0 via skillsh Verify on GitHub
D AI-triaged 135
GitHub
D Security

D; retained sample includes a medium finding · SD-008 · what this rule accepts as a false positive →

D Permissions

D; retained sample includes a high finding · SD-003 · what this rule accepts as a false positive →

B Transparency

B; retained sample includes a medium finding · SD-007 · what this rule accepts as a false positive →

showing 10 of 135
securitymedium SD-008
SKILL.md
securitymedium SD-008
SKILL.md
transparencymedium SD-007
assets/enterprise_api/API_Total_Usage.json
transparencymedium SD-007
assets/enterprise_api/ActionLinkTemplate.json
permission_hygienehigh SD-003
assets/enterprise_api/AnalyticsDownloadEventLog.json
permission_hygienehigh SD-003
assets/enterprise_api/AnalyticsInteractEventLog.json
permission_hygienehigh SD-003
assets/enterprise_api/AnalyticsPerfEventLog.json
permission_hygienehigh SD-003
assets/enterprise_api/ApexCalloutEventLog.json
permission_hygienehigh SD-003
assets/enterprise_api/ApexExecutionEventLog.json
permission_hygienehigh SD-003
assets/enterprise_api/ApexRestApiEventLog.json
3 suppressed by AI triage
permission_hygienehigh SD-003 benign_example
assets/enterprise_api/AnalyticsChangeEventLog.json

The path is in a description string, not executed code, thus no real path traversal risk.

transparencymedium SD-007 benign_example
assets/enterprise_api/Blocked_Redirect_Event_Type.json

The file is documentation and the outbound call is an example, not executable code.

transparencymedium SD-007 benign_example
assets/enterprise_api/Hostname_Redirects_Event_Type.json

The text is a documentation note describing a logged outbound call, not an executable network request.