experience-content-media-search — security audits
Flagged by auditors
Independent security partners scan this skill's files for malicious content, prompt injection and risky patterns. Verdicts below come from the skills.sh audit program; each partner links to its full report.
Gen Agent Trust Hub
passThis skill acts as a routing mechanism for searching and retrieving media from Salesforce CMS and Data 360. It enforces a strict workflow requiring user interaction before any search tools are invoked. No malicious code, exfiltration attempts, or unauthorized network operations were detected. The skill correctly identifies its dependencies and limits its scope to existing asset retrieval. Identified risks, such as indirect prompt injection and handling of authenticated URLs, are managed through the required user-in-the-loop search and selection steps.
Socket
passNo alerts
Jun 26, 2026Full reportSnyk
failRisk: HIGH · 1 issue