plugin

agentforce-adlc High risk

Name: agentforce-adlc
Author: forcedotcom

forcedotcomforcedotcom/sf-skillsupdated 2 days ago

Browse GitHub Download zip Book a demo

Agentforce Agent Development Life Cycle: author, discover, scaffold, deploy, test, secure, and optimize .agent files

forcedotcom's own description, from the plugin's files.

Engineering AI & agents Securityplugin

Stars: 1,140
Version: v1
Copies: 0

Overview Security4 Versions1 Files348

Overview

blockHigh risk

Waxell rates it high risk: 4 findings, highest severity critical.

Highest severity: critical
Findings: 4
What ran: Static analysis

A clean result means nothing alarming in what is published, not a guarantee. How the checks work

We don't republish the plugin's instructions. Read them on GitHub at the reviewed commit.

Security

Security scan

Checked 2 days ago

Result

High risk Waxell rates it high risk: 4 findings, highest severity critical.

Checked with static analysis: servers it launches, packages it installs at runtime, scripts piped to a shell and bundled binaries. Nothing was run. How the checks work

Findings (4)

critical · 1

critical
Tells Claude to download a script and pipe it to a shell
scripts/test/test_guardrails_hook.py:56 · skill_risk:S1

high · 3

high
Tells Claude to install unpinned packages (@salesforce/cli)
skills/agentforce-generate/references/data-library-reference.md:232 · skill_risk:S2
high
Tells Claude to install unpinned packages (@salesforce/cli)
skills/agentforce-generate/references/deploy-reference.md:116 · skill_risk:S2
high
Tells Claude to install unpinned packages (@salesforce/cli@latest)
skills/agentforce-generate/references/legacy-nga-regression-eval.md:67 · skill_risk:S2

Versions

Version history

Each distinct content we have seen, newest first, with the verdict it got at the time.

One version so far: v1 (0.13.0), seen 2026-11-03.

Files

348 files, 3.7 MB in total. Names only; open them on GitHub.

.claude-plugin/plugin.json
.codex-plugin/plugin.json
CHANGELOG.md
README.md
agents/adlc-author.md
agents/adlc-engineer.md
agents/adlc-orchestrator.md
agents/adlc-qa.md
scripts/test/test_guardrails_hook.py
scripts/verify-public-plugin-release.py
shared/hooks/scripts/agent-validator.py
shared/hooks/scripts/guardrails.py
shared/hooks/scripts/session-init.py
shared/hooks/scripts/stdin_utils.py
shared/hooks/skills-registry.json
shared/sf-cli/__init__.py
shared/sf-cli/sf_cli.py
skills/agentforce-architecture-analyze/README.md
skills/agentforce-architecture-analyze/SKILL.md
skills/agentforce-architecture-analyze/assets/cli/describe_sobject.yaml
skills/agentforce-architecture-analyze/assets/cli/describe_tooling_sobject.yaml
skills/agentforce-architecture-analyze/assets/cli/list_metadata_genaiprompttemplate.yaml
skills/agentforce-architecture-analyze/assets/cli/org_display.yaml
skills/agentforce-architecture-analyze/assets/cli/retrieve_genai_plugin.yaml
skills/agentforce-architecture-analyze/assets/cli/show_access_token.yaml
skills/agentforce-architecture-analyze/assets/mermaid/action_tree.mmd
skills/agentforce-architecture-analyze/assets/mermaid/data_flow.mmd
skills/agentforce-architecture-analyze/assets/mermaid/dependency_graph.mmd
skills/agentforce-architecture-analyze/assets/mermaid/invocation_sequence.mmd
skills/agentforce-architecture-analyze/assets/mermaid/planner_state.mmd
skills/agentforce-architecture-analyze/assets/soql/apex_class_bodies_by_ids.soql
skills/agentforce-architecture-analyze/assets/soql/apex_class_bodies_by_names.soql
skills/agentforce-architecture-analyze/assets/soql/bot_definition_details.soql
skills/agentforce-architecture-analyze/assets/soql/bot_version_lookup.soql
skills/agentforce-architecture-analyze/assets/soql/flow_definition_by_ids.soql
skills/agentforce-architecture-analyze/assets/soql/flow_definition_ids_by_names.soql
skills/agentforce-architecture-analyze/assets/soql/flow_definition_view_by_durable_ids.soql
skills/agentforce-architecture-analyze/assets/soql/flow_metadata_by_id.soql
skills/agentforce-architecture-analyze/assets/soql/functions_by_plugins.soql
skills/agentforce-architecture-analyze/assets/soql/planner_attrs_by_parent_ids.soql
skills/agentforce-architecture-analyze/assets/soql/planner_bundle_functions.soql
skills/agentforce-architecture-analyze/assets/soql/planner_definition_by_agent_chain.soql
skills/agentforce-architecture-analyze/assets/soql/plugin_functions_by_plugin_ids.soql
skills/agentforce-architecture-analyze/assets/soql/plugin_instructions_by_plugin_ids.soql
skills/agentforce-architecture-analyze/assets/soql/plugins_by_planner.soql
skills/agentforce-architecture-analyze/references/architecture_sections.md
skills/agentforce-architecture-analyze/references/contract.json
skills/agentforce-architecture-analyze/references/soql_fields.md
skills/agentforce-architecture-analyze/scripts/_shared/__init__.py
skills/agentforce-architecture-analyze/scripts/_shared/fs_guard.py
skills/agentforce-architecture-analyze/scripts/_shared/paths.py
skills/agentforce-architecture-analyze/scripts/_shared/runtime.py
skills/agentforce-architecture-analyze/scripts/_shared/sql.py
skills/agentforce-architecture-analyze/scripts/cache_check.py
skills/agentforce-architecture-analyze/scripts/config.py
skills/agentforce-architecture-analyze/scripts/emit_env.py
skills/agentforce-architecture-analyze/scripts/emit_result.py
skills/agentforce-architecture-analyze/scripts/fetch_soql.py
skills/agentforce-architecture-analyze/scripts/finalize.py
skills/agentforce-architecture-analyze/scripts/main.py
skills/agentforce-architecture-analyze/scripts/metadata_listing.py
skills/agentforce-architecture-analyze/scripts/parallel_retrieve.py
skills/agentforce-architecture-analyze/scripts/parse_bundle.py
skills/agentforce-architecture-analyze/scripts/parse_wave.py
skills/agentforce-architecture-analyze/scripts/probe_channels.py
skills/agentforce-architecture-analyze/scripts/render_architecture.py
skills/agentforce-architecture-analyze/scripts/resolve_bot.py
skills/agentforce-architecture-analyze/scripts/resolve_invocation_target.py
skills/agentforce-architecture-analyze/scripts/rest_client.py
skills/agentforce-architecture-analyze/scripts/retrieve_planner.py
skills/agentforce-architecture-analyze/scripts/sanitize.py
skills/agentforce-architecture-analyze/scripts/sf_cli.py
skills/agentforce-architecture-analyze/scripts/soql_loader.py
skills/agentforce-architecture-analyze/scripts/summarize_tree.py
skills/agentforce-architecture-analyze/scripts/tests/__init__.py
skills/agentforce-architecture-analyze/scripts/tests/_bootstrap.py
skills/agentforce-architecture-analyze/scripts/tests/fixtures/__init__.py
skills/agentforce-architecture-analyze/scripts/tests/fixtures/genai_payloads.py
skills/agentforce-architecture-analyze/scripts/tests/test_cache_check.py
skills/agentforce-architecture-analyze/scripts/tests/test_cache_check_main.py
skills/agentforce-architecture-analyze/scripts/tests/test_config.py
skills/agentforce-architecture-analyze/scripts/tests/test_end_to_end_fixture.py
skills/agentforce-architecture-analyze/scripts/tests/test_finalize.py
skills/agentforce-architecture-analyze/scripts/tests/test_flow_children_inflation.py
skills/agentforce-architecture-analyze/scripts/tests/test_fs_guard.py
skills/agentforce-architecture-analyze/scripts/tests/test_iterative_wave_b.py
skills/agentforce-architecture-analyze/scripts/tests/test_main_pipeline.py
skills/agentforce-architecture-analyze/scripts/tests/test_parallel_retrieve.py
skills/agentforce-architecture-analyze/scripts/tests/test_parse_bundle.py
skills/agentforce-architecture-analyze/scripts/tests/test_parse_wave.py
skills/agentforce-architecture-analyze/scripts/tests/test_parse_wave_classifiers.py
skills/agentforce-architecture-analyze/scripts/tests/test_parse_wave_helpers.py
skills/agentforce-architecture-analyze/scripts/tests/test_parse_wave_main.py
skills/agentforce-architecture-analyze/scripts/tests/test_per_branch_visited.py
skills/agentforce-architecture-analyze/scripts/tests/test_probe_channels.py
skills/agentforce-architecture-analyze/scripts/tests/test_probe_cli_recipes.py
skills/agentforce-architecture-analyze/scripts/tests/test_render_architecture.py
skills/agentforce-architecture-analyze/scripts/tests/test_resolve_bot.py
skills/agentforce-architecture-analyze/scripts/tests/test_resolve_creds.py
skills/agentforce-architecture-analyze/scripts/tests/test_resolve_invocation_target.py
skills/agentforce-architecture-analyze/scripts/tests/test_rest_client.py
skills/agentforce-architecture-analyze/scripts/tests/test_runtime_override.py
skills/agentforce-architecture-analyze/scripts/tests/test_sf_cli.py
skills/agentforce-architecture-analyze/scripts/tests/test_signature_stamping.py
skills/agentforce-architecture-analyze/scripts/tests/test_skill_md_pipeline_block.py
skills/agentforce-architecture-analyze/scripts/tests/test_soql_loader.py
skills/agentforce-architecture-analyze/scripts/tests/test_summarize_tree.py
skills/agentforce-architecture-analyze/scripts/tests/test_write_emit_ctx.py
skills/agentforce-architecture-analyze/scripts/write_emit_ctx.py
skills/agentforce-bot-upgrade/SKILL.md
skills/agentforce-bot-upgrade/references/extraction-blueprint.md
skills/agentforce-bot-upgrade/references/generate-agent-spec.md
skills/agentforce-bot-upgrade/references/handoff-output-format.md
skills/agentforce-bot-upgrade/references/input-contract.md
skills/agentforce-bot-upgrade/references/mapping-rules.md
skills/agentforce-bot-upgrade/references/planner-workflow-reference.md
skills/agentforce-bot-upgrade/references/post-conversion-enhancements-reference.md
skills/agentforce-bot-upgrade/references/quality-checklist.md
skills/agentforce-bot-upgrade/references/sf-cli-bot-reference.md
skills/agentforce-d360-analyze/README.md
skills/agentforce-d360-analyze/SKILL.md
skills/agentforce-d360-analyze/assets/dc/app_generation.sql
skills/agentforce-d360-analyze/assets/dc/content_category.sql
skills/agentforce-d360-analyze/assets/dc/content_quality.sql
skills/agentforce-d360-analyze/assets/dc/discover_sessions.sql
skills/agentforce-d360-analyze/assets/dc/feedback.sql
skills/agentforce-d360-analyze/assets/dc/feedback_details.sql
skills/agentforce-d360-analyze/assets/dc/gateway_records.sql
skills/agentforce-d360-analyze/assets/dc/gateway_request_llm.sql
skills/agentforce-d360-analyze/assets/dc/gateway_request_metadata.sql
skills/agentforce-d360-analyze/assets/dc/gateway_request_tags.sql
skills/agentforce-d360-analyze/assets/dc/gateway_requests.sql
skills/agentforce-d360-analyze/assets/dc/gateway_responses.sql
skills/agentforce-d360-analyze/assets/dc/generations.sql
skills/agentforce-d360-analyze/assets/dc/interactions.sql
skills/agentforce-d360-analyze/assets/dc/messages.sql
skills/agentforce-d360-analyze/assets/dc/messaging_session.sql
skills/agentforce-d360-analyze/assets/dc/moment_interactions.sql
skills/agentforce-d360-analyze/assets/dc/moments.sql
skills/agentforce-d360-analyze/assets/dc/participants.sql
skills/agentforce-d360-analyze/assets/dc/sessions.sql
skills/agentforce-d360-analyze/assets/dc/steps.sql
skills/agentforce-d360-analyze/assets/dc/tag_associations.sql
skills/agentforce-d360-analyze/assets/dc/tag_definition_associations.sql
skills/agentforce-d360-analyze/assets/dc/tag_definitions.sql
skills/agentforce-d360-analyze/assets/dc/tags.sql
skills/agentforce-d360-analyze/assets/dc/telemetry_spans.sql
skills/agentforce-d360-analyze/references/artifacts.md
skills/agentforce-d360-analyze/references/dc_dmo_fields.md
skills/agentforce-d360-analyze/references/dc_pipeline_contract.md
skills/agentforce-d360-analyze/scripts/_shared/__init__.py
skills/agentforce-d360-analyze/scripts/_shared/cli_override.py
skills/agentforce-d360-analyze/scripts/_shared/fs_guard.py
skills/agentforce-d360-analyze/scripts/_shared/paths.py
skills/agentforce-d360-analyze/scripts/_shared/runtime.py
skills/agentforce-d360-analyze/scripts/_shared/sql.py
skills/agentforce-d360-analyze/scripts/assemble_dc.py
skills/agentforce-d360-analyze/scripts/config.py
skills/agentforce-d360-analyze/scripts/dc.py
skills/agentforce-d360-analyze/scripts/discover_sessions.py
skills/agentforce-d360-analyze/scripts/fetch_dc.py
skills/agentforce-d360-analyze/scripts/render_dc.py
skills/agentforce-d360-analyze/scripts/resolve_session.py
skills/agentforce-d360-analyze/scripts/storage.py
skills/agentforce-d360-analyze/scripts/tests/__init__.py
skills/agentforce-d360-analyze/scripts/tests/_bootstrap.py
skills/agentforce-d360-analyze/scripts/tests/fixtures/__init__.py
skills/agentforce-d360-analyze/scripts/tests/fixtures/synthetic_session.py
skills/agentforce-d360-analyze/scripts/tests/test_assemble_dc_bootstrap_and_mode.py
skills/agentforce-d360-analyze/scripts/tests/test_assemble_dc_gateway_direct.py
skills/agentforce-d360-analyze/scripts/tests/test_assemble_dc_gateway_direct_integration.py
skills/agentforce-d360-analyze/scripts/tests/test_assemble_dc_helpers.py
skills/agentforce-d360-analyze/scripts/tests/test_assemble_dc_integration.py
skills/agentforce-d360-analyze/scripts/tests/test_dc_and_resolve_session.py
skills/agentforce-d360-analyze/scripts/tests/test_default_target_org.py
skills/agentforce-d360-analyze/scripts/tests/test_discover_sessions.py
skills/agentforce-d360-analyze/scripts/tests/test_discover_sessions_grep_ci.py
skills/agentforce-d360-analyze/scripts/tests/test_fetch_dc_helpers.py
skills/agentforce-d360-analyze/scripts/tests/test_fetch_dc_identity.py
skills/agentforce-d360-analyze/scripts/tests/test_fetch_dc_main.py
skills/agentforce-d360-analyze/scripts/tests/test_fetch_dc_waterfall.py
skills/agentforce-d360-analyze/scripts/tests/test_fetch_dc_waterfall_full.py
skills/agentforce-d360-analyze/scripts/tests/test_identity_coherence.py
skills/agentforce-d360-analyze/scripts/tests/test_render_dc_branches.py
skills/agentforce-d360-analyze/scripts/tests/test_render_dc_gateway_direct.py
skills/agentforce-d360-analyze/scripts/tests/test_render_dc_helpers.py
skills/agentforce-d360-analyze/scripts/tests/test_render_dc_integration.py
skills/agentforce-d360-analyze/scripts/tests/test_render_dc_planner_llm_calls.py
skills/agentforce-d360-analyze/scripts/tests/test_render_dc_show_prompts_gating.py
skills/agentforce-d360-analyze/scripts/tests/test_resolve_from_disk.py
skills/agentforce-d360-analyze/scripts/tests/test_resolve_session_main.py
skills/agentforce-d360-analyze/scripts/tests/test_runtime_override.py
skills/agentforce-d360-analyze/scripts/tests/test_session_shape.py
skills/agentforce-d360-analyze/scripts/tests/test_session_shape_dropped_by_stdm.py
skills/agentforce-d360-analyze/scripts/tests/test_skill_md_prefix_block.py
skills/agentforce-generate/README.md
skills/agentforce-generate/SKILL.md
skills/agentforce-generate/assets/agent-spec-template.md
skills/agentforce-generate/assets/agents/README.md
skills/agentforce-generate/assets/agents/hello-world.agent
and 148 more

See and control which skills your people use

Inside your organization, Waxell scans each skill and plugin before anyone installs it, approves what passes and publishes it to a private marketplace, and puts every MCP tool call behind one governed URL.

Book a demo

30 minutes. No commitment.

SOC 2 Type II attested · ISO/IEC 27001:2022 certified · HIPAA with a BAA · aligned to the EU AI Act and NIST AI RMF

More engineering skills and plugins

See all