forcedotcom/sf-skills sales-agentforce-pipeline-management-configure
Checked the catalogued skill at sales-agentforce-pipeline-management-configure.
D; retained sample includes a high finding · SD-007 · what this rule accepts as a false positive →
D; retained sample includes a high finding · SD-003 · what this rule accepts as a false positive →
B; retained sample includes a medium finding · SD-007 · what this rule accepts as a false positive →
5 suppressed by AI triage
The text only mentions curl commands as a guideline, not an actual outbound network call or permission grant.
The declared endpoint is a standard Salesforce Metadata API URL, not an arbitrary outbound call, thus benign.
The URL is a standard Salesforce namespace declaration, not an outbound network call or permission grant.
Only a configuration value specifying the Salesforce login URL; no outbound call or permission grant present.
Writes to /tmp, a non‑critical temp directory, not using user‑controlled traversal.