← Back to search

@advanced-communities/salesforce-mcp-server

akutishevsky Scanned 9d ago

MCP server enabling AI assistants to interact with Salesforce orgs through the Salesforce CLI

C
64.5 / 100

Versions

1.6.6latest
May 27, 2026
1.6.5
Apr 16, 2026
1.6.4
Feb 19, 2026
1.6.3
Feb 19, 2026
1.6.2
Feb 16, 2026
+ show 17 moreshow less
1.6.1
Feb 16, 2026
1.5.6
Feb 9, 2026
1.5.5
Oct 26, 2025
1.5.3
Sep 20, 2025
1.5.2
Sep 15, 2025
1.5.1
Sep 3, 2025
1.5.0
Sep 2, 2025
1.4.0
Aug 31, 2025
1.3.2
Aug 31, 2025
1.3.1
Aug 21, 2025
1.3.0
Aug 19, 2025
1.2.6
Aug 15, 2025
1.2.5
Aug 15, 2025
1.2.4
Aug 13, 2025
1.2.3
Aug 8, 2025
1.2.2
Aug 7, 2025
1.2.1
Aug 7, 2025
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 47

generate_component
annotations: verified low

Generate Lightning Web Components (LWC) or Aura components with customizable templates and output directories

input object
readOnlyHint false openWorldHint true idempotentHint false destructiveHint true
list_connected_salesforce_orgs
annotations: verified low

List connected Salesforce Orgs. This command retrieves a list of all Salesforce Orgs that are currently connected to the Salesforce CLI. The results are returned in JSON format, providing details about each Org, including its alias, username, and other metadata. Use this command to see which Salesforce Orgs you have access to and can interact with using the Salesforce CLI.

readOnlyHint true openWorldHint true idempotentHint true destructiveHint false
login_into_org
annotations: verified low

Authenticate and login to a Salesforce org via web browser. This command opens a browser window for OAuth authentication flow, allowing you to securely connect to a Salesforce org. After successful authentication, the org credentials are stored locally by the Salesforce CLI for future use. Use isProduction=true for production/developer orgs (login.salesforce.com) or isProduction=false for sandboxes/scratch orgs (test.salesforce.com). The alias parameter creates a convenient shorthand name for accessing this org in subsequent commands. IMPORTANT: This tool requires both 'alias' and 'isProduction' parameters to be provided before execution - do not proceed until all required parameters are supplied.

alias string input object
readOnlyHint false openWorldHint true idempotentHint false destructiveHint true
assign_permission_set
annotations: verified low

Assign a permission set to one or more org users. To specify an alias for the --target-org or --on-behalf-of flags, use the CLI username alias, such as the one you set with the 'alias set' command. Don't use the value of the Alias field of the User Salesforce object for the org user. To assign multiple permission sets, specify multiple names in the permissionSetNames array. Enclose names that contain spaces in the array elements. The same syntax applies to onBehalfOf array for specifying multiple users.

input object
readOnlyHint false openWorldHint true idempotentHint false destructiveHint true
assign_permission_set_license
annotations: verified low

Assign a permission set license to one or more org users. To specify an alias for the --target-org or --on-behalf-of flags, use the CLI username alias, such as the one you set with the 'alias set' command. Don't use the value of the Alias field of the User Salesforce object for the org user. To assign multiple permission set licenses, specify multiple names in the licenseNames array. Enclose names that contain spaces in the array elements. The same syntax applies to onBehalfOf array for specifying multiple users.

input object
readOnlyHint false openWorldHint true idempotentHint false destructiveHint true
display_user
annotations: verified low

Display information about a Salesforce user. Output includes the profile name, org ID, access token, instance URL, login URL, and alias if applicable. The username, org ID, instance URL and login URL are masked for privacy. The displayed alias is local and different from the Alias field of the User sObject record of the new user, which you set in the Setup UI.

input object
readOnlyHint true openWorldHint true idempotentHint true destructiveHint false
list_metadata
annotations: verified low

List the metadata components and properties of a specified type. Use this command to identify individual components in your manifest file or if you want a high-level view of particular metadata types in your org. For example, you can use this command to return a list of names of all the CustomObject or Layout components in your org, then use this information in a retrieve command that returns a subset of these components. The username that you use to connect to the org must have the Modify All Data or Modify Metadata Through Metadata API Functions permission.

input object
readOnlyHint true openWorldHint true idempotentHint true destructiveHint false
list_metadata_types
annotations: verified low

Display details about the metadata types that are enabled for your org. The information includes Apex classes and triggers, custom objects, custom fields on standard objects, tab sets that define an app, and many other metadata types. Use this information to identify the syntax needed for a <name> element in a manifest file (package.xml). The username that you use to connect to the org must have the Modify All Data or Modify Metadata Through Metadata API Functions permission.

input object
readOnlyHint true openWorldHint true idempotentHint true destructiveHint false
logout
annotations: verified low

Log out of a Salesforce org. Use targetOrg to logout of a specific org, or set all to true to logout of all orgs. The logout is performed with --no-prompt flag to avoid confirmation prompts. Be careful! If you log out of a scratch org without having access to its password, you can't access the scratch org again, either through the CLI or the Salesforce UI.

input object
readOnlyHint false openWorldHint true idempotentHint false destructiveHint true
open
annotations: verified low

Open your Salesforce org in a browser. To open a specific page, specify the portion of the URL after 'https://mydomain.my.salesforce.com' as the path value. Use sourceFile to open ApexPage, FlexiPage, Flow, or Agent metadata from your local project in the associated Builder.

input object
readOnlyHint true openWorldHint true idempotentHint true destructiveHint false
get_default_org
annotations: verified low

Get the current default target org configured in the Salesforce CLI. Returns only the org's alias, which is used as the default when no targetOrg is specified in other tool calls. If the default org has no alias, a masked username is returned with a hint asking the user to set an alias; usernames, org IDs and instance URLs are never returned.

input object
readOnlyHint true openWorldHint true idempotentHint true destructiveHint false
set_default_org
annotations: verified low

Set the default target org for the Salesforce CLI. Once set, all tools will use this org by default when no targetOrg is specified. The value persists across sessions.

input object
readOnlyHint false openWorldHint true idempotentHint true destructiveHint true
clear_default_org
annotations: verified low

Clear the default target org from the Salesforce CLI configuration. After clearing, all tools will require an explicit targetOrg parameter until a new default is set.

readOnlyHint false openWorldHint true idempotentHint true destructiveHint true
execute_anonymous_apex
annotations: verified low

Execute Apex code in a Salesforce Org. This command allows you to run Apex code directly against a specified Salesforce Org. The code is executed in the context of the Org, and the results are returned in JSON format. You can use this command to test Apex code snippets, run batch jobs, or perform other Apex-related tasks. You can review the debug logs of the execution to see the results of the code execution.

input object
readOnlyHint false openWorldHint true idempotentHint false destructiveHint true
run_apex_tests
annotations: none low

Run Apex tests in a Salesforce Org. This command allows you to execute unit tests with various options including test level, specific classes, suites, and code coverage collection. Tests can be run synchronously or asynchronously. Use this to validate your Apex code and ensure proper test coverage.

get_apex_test_results
annotations: none low

Retrieve results from a previous asynchronous Apex test run. Use this command with a test run ID to get detailed test results including pass/fail status, error messages, stack traces, and optionally code coverage information.

input object
get_apex_code_coverage
annotations: verified low

Get code coverage information for a Salesforce Org. This command allows you to retrieve org-wide coverage percentage or coverage details from a specific test run. Use this to monitor and ensure your code meets the 75% coverage requirement.

input object
readOnlyHint true openWorldHint true idempotentHint true destructiveHint false
generate_class
annotations: verified low

Generates the Apex *.cls file and associated metadata file. These files must contained in a parent directory called "classes" in your package directory. Either run this command existing directory of this name, or use the --output-dir flag to generate one or point to an existing one.

input object
readOnlyHint false openWorldHint true idempotentHint false destructiveHint true
generate_trigger
annotations: verified low

Generates the Apex trigger *.trigger file and associated metadata file. These files must be contained in a parent directory called "triggers" in your package directory. Either run this command from an existing directory of this name, or use the --output-dir flag to generate one or point to an existing one. If you don\'t specify the --sobject flag, the .trigger file contains the generic placeholder SOBJECT; replace it with the Salesforce object you want to generate a trigger for. If you don\'t specify --event, "before insert" is used.

input object
readOnlyHint false openWorldHint true idempotentHint false destructiveHint true
apex_log_list
annotations: verified low

Fetch the list of apex debug logs returning the logs with their IDs.

input object
readOnlyHint true openWorldHint true idempotentHint true destructiveHint false
apex_get_log
annotations: verified low

Fetch the specified log or given number of most recent logs from the org.

input object
readOnlyHint true openWorldHint true idempotentHint true destructiveHint false
open_record
annotations: verified low

Opens a Salesforce record in a browser.

input object
readOnlyHint true openWorldHint true idempotentHint true destructiveHint false
create_record
annotations: verified low

Create a new record in a Salesforce org using the REST API. Returns the ID of the created record on success. Input must be a JSON object with keys: sObject (string), recordJson (string), and optionally targetOrg (string).

readOnlyHint false openWorldHint true idempotentHint false destructiveHint true
update_record
annotations: verified low

Update an existing record in a Salesforce org using the REST API. Updates specified fields on the record. Input must be a JSON object with keys: sObject (string), recordId (string), recordJson (string), and optionally targetOrg (string).

readOnlyHint false openWorldHint true idempotentHint true destructiveHint true
delete_record
annotations: verified low

Delete a record from a Salesforce org using the REST API. Permanently removes the specified record. Input must be a JSON object with keys: sObject (string), recordId (string), and optionally targetOrg (string).

readOnlyHint false openWorldHint true idempotentHint false destructiveHint true
package_install
annotations: none low

Install or upgrade a package version in a Salesforce org. Supports both package IDs (04t) and aliases with various configuration options.

package_uninstall
annotations: verified low

Uninstall a second-generation package from the target org. Specify the package ID (starts with 04t) or alias for the package to uninstall.

input object
readOnlyHint false openWorldHint true idempotentHint false destructiveHint true
get_server_permissions
annotations: verified low

Get current server permission settings

readOnlyHint true openWorldHint true idempotentHint true destructiveHint false
run_code_analyzer
annotations: verified low

Analyze code for quality and security issues. Run list_code_analyzer_rules first to select appropriate rules for ruleSelector parameter.

input object
readOnlyHint false openWorldHint true idempotentHint false destructiveHint true
list_code_analyzer_rules
annotations: verified low

List available code analysis rules with details. Use to determine rules for code-analyzer run command.

input object
readOnlyHint true openWorldHint true idempotentHint true destructiveHint false
sobject_list
annotations: verified low

List all standard and custom objects in a Salesforce Org. This command retrieves a list of all standard and custom objects available in the specified Salesforce Org. The results are returned in JSON format, providing details about each object, including its name, label, and other metadata. Use this command to explore the objects in your Salesforce Org and understand their structure and properties, especially if asked to work with specific objects in your Apex code or SOQL queries and you don't know their API names. Always execute this tool before writing Apex code or SOQL queries to ensure you have the correct object names.

input object
readOnlyHint true openWorldHint true idempotentHint true destructiveHint false
sobject_describe
annotations: verified low

Describe a Salesforce SObject. This command retrieves detailed metadata about a specific Salesforce SObject, including its fields, relationships, and other properties. The results are returned in JSON format, providing a comprehensive view of the SObject's structure. Use this command to understand the schema of a specific SObject, which is especially useful when writing Apex code or SOQL queries that interact with that SObject. Always execute this tool before querying or manipulating records in the SObject to ensure you have the correct field names and types.

input object
readOnlyHint true openWorldHint true idempotentHint true destructiveHint false
search_records
annotations: verified low

Search for text across multiple Salesforce objects simultaneously. USE THIS TOOL when searching for records that mention, contain, or reference specific text (like company names, keywords, phrases) across different objects. This is the PRIMARY tool for text-based searches across your org - it's much more efficient than running multiple SOQL queries. Perfect for finding all records mentioning a competitor, customer name, or any text across Accounts, Opportunities, Cases, Contacts, etc. SOSL (Salesforce Object Search Language) performs full-text search across all searchable fields.

readOnlyHint true openWorldHint true idempotentHint false destructiveHint false
query_records
annotations: verified low

Query records from a SINGLE Salesforce object using structured field conditions. Use this for precise queries on ONE object with specific field criteria (e.g., Status = 'Open', Amount > 1000). NOT for text searches across multiple objects - use search_records for that. This executes SOQL queries with SELECT, WHERE, ORDER BY, and LIMIT clauses on a single SObject. The results are returned in JSON format. IMPORTANT: Always execute the `sobject_list` tool first to understand which objects are available in the org, and optionally execute `sobject_describe` for the specific SObject to understand its fields and structure before querying.

input object
readOnlyHint true openWorldHint true idempotentHint true destructiveHint false
query_records_to_file
annotations: verified low

Query records from a Salesforce SObject and save to a file. This command allows you to execute a SOQL query against a specified Salesforce SObject in a given Org and save the results to a file. You can specify the SELECT clause (fields, functions like COUNT(), aggregations, etc.), an optional WHERE clause, and save the results in various formats. The results can be saved in CSV format by default, or in other formats if specified. IMPORTANT: Always execute the `sobject_list` tool first to understand which objects are available in the org, and optionally execute `sobject_describe` for the specific SObject to understand its fields and structure before querying.

input object
readOnlyHint true openWorldHint true idempotentHint false destructiveHint false
deploy_start
annotations: verified low

Deploy metadata to Salesforce org with test execution options.

input object
readOnlyHint false openWorldHint true idempotentHint false destructiveHint true
schema_generate_tab
annotations: verified low

Generate metadata source files for a new custom tab on a custom object. Custom tabs display custom object data in Salesforce navigation.

readOnlyHint false openWorldHint true idempotentHint false destructiveHint true
bulk_insert_records
annotations: none low

Insert many records with the Bulk API 2.0 (asynchronous, for large volumes). Provide exactly one of 'records' (inline JSON objects, max 2000), 'csvPath' (a CSV file on the server's machine) or 'csvContent' (raw CSV text with its header row, for files the server cannot read, such as uploads into a sandboxed client; max 10 MB). Returns the jobId, state, processed and failed counts, and up to 10 sample failures when the job finishes within 'wait' seconds. Use bulk_job_results for full result files. Do not include Id values for inserts. Null values are written as #N/A, which clears a field.

bulk_update_records
annotations: none low

Update many existing records by Id with the Bulk API 2.0. Each record (or each CSV row) must include 'Id'; only the provided fields are changed. Provide exactly one of 'records', 'csvPath' or 'csvContent'. Inline Ids are format-checked before the job is created; Ids in CSV text are not, and a malformed one fails only its own row. Null values are written as #N/A, which clears a field. Updates above 500 rows ask the user to confirm when the client supports confirmation. Returns the jobId, state, processed and failed counts, and sample failures when the job finishes within 'wait' seconds.

bulk_upsert_records
annotations: none low

Insert or update many records with the Bulk API 2.0, matching existing records on an external ID field. Each record (or CSV row) must include the externalIdField value; do not include Id. Provide exactly one of 'records', 'csvPath' or 'csvContent'. Upserts above 500 rows ask the user to confirm when the client supports confirmation. Returns the jobId, state, processed and failed counts, and sample failures when the job finishes within 'wait' seconds.

bulk_delete_records
annotations: none low

Soft-delete many records with the Bulk API 2.0 (moves them to the Recycle Bin). Provide exactly one of 'ids' (max 2000 Salesforce record Ids), 'csvPath' (a CSV file on the server's machine with an 'Id' column) or 'csvContent' (raw CSV text with an 'Id' column, for files the server cannot read). If the client can show a confirmation prompt, the user is asked and declining blocks the delete. If it cannot, pass confirm: 'DELETE <sobject>' (for example 'DELETE Account') and the user's approval of this call in the client is the remaining gate. Returns the jobId, state, processed and failed counts. Use bulk_hard_delete_records to permanently delete.

bulk_hard_delete_records
annotations: none low

PERMANENTLY delete many records with the Bulk API 2.0 hardDelete operation. Records bypass the Recycle Bin and cannot be restored. Requires the 'Bulk API Hard Delete' permission on the user. Provide exactly one of 'ids', 'csvPath' or 'csvContent' (CSV with an 'Id' column), and the exact 'confirm' string 'HARD DELETE <sobject>' (for example 'HARD DELETE Account'). If the client can show a confirmation prompt, the user is also asked and declining blocks the delete. Otherwise the typed 'confirm' string and the user's approval of this call in the client are the gates.

bulk_job_status
annotations: none low

Check the state and record counts of a Bulk API 2.0 job created by a bulk_* tool. Use it after a start call returned a non-final state. Read-only.

bulk_job_results
annotations: none low

Write the successful, failed and unprocessed records of a finished Bulk API 2.0 job to CSV files and return their paths and row counts. Files go to <home>/salesforce-bulk-results/<jobId>/ unless outputDir is given. The result folder itself must not be a symbolic link (default or custom); symbolic links in parent folders are not checked. A custom outputDir must be an absolute path and must not already contain these files. Read-only in the org; writes local CSV files.

bulk_job_abort
annotations: none low

Abort a Bulk API 2.0 job that has not finished (Open, UploadComplete or InProgress). Records already processed are not rolled back. Jobs are never deleted by these tools.

scanner_run
annotations: none low

Scan codebase with security and quality rules. Defaults to all rules if none specified.

scanner_run_dfa
annotations: none low

Run Graph Engine for Apex data flow analysis. Detects complex security issues like SOQL/SQL injection.

Permissions 3

network medium
Server uses network capabilities via: fetch()
shell high
Server uses shell capabilities via: child_process, spawn()
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 109

info
Tool 'generate_component' annotations are consistent annotation_checker · 80%
info
Tool 'list_connected_salesforce_orgs' annotations are consistent annotation_checker · 80%
info
Tool 'login_into_org' annotations are consistent annotation_checker · 80%
info
Tool 'assign_permission_set' annotations are consistent annotation_checker · 80%
info
Tool 'assign_permission_set_license' annotations are consistent annotation_checker · 80%
info
Tool 'display_user' annotations are consistent annotation_checker · 80%
info
Tool 'list_metadata' annotations are consistent annotation_checker · 80%
info
Tool 'list_metadata_types' annotations are consistent annotation_checker · 80%
info
Tool 'logout' annotations are consistent annotation_checker · 80%
info
Tool 'open' annotations are consistent annotation_checker · 80%
info
Tool 'get_default_org' annotations are consistent annotation_checker · 80%
info
Tool 'set_default_org' annotations are consistent annotation_checker · 80%
info
Tool 'clear_default_org' annotations are consistent annotation_checker · 80%
info
Tool 'execute_anonymous_apex' annotations are consistent annotation_checker · 80%
low
Tool 'run_apex_tests' has no annotations annotation_checker · 100%
low
Tool 'get_apex_test_results' has no annotations annotation_checker · 100%
info
Tool 'get_apex_code_coverage' annotations are consistent annotation_checker · 80%
info
Tool 'generate_class' annotations are consistent annotation_checker · 80%
info
Tool 'generate_trigger' annotations are consistent annotation_checker · 80%
info
Tool 'apex_log_list' annotations are consistent annotation_checker · 80%
info
Tool 'apex_get_log' annotations are consistent annotation_checker · 80%
info
Tool 'open_record' annotations are consistent annotation_checker · 80%
info
Tool 'create_record' annotations are consistent annotation_checker · 80%
info
Tool 'update_record' annotations are consistent annotation_checker · 80%
info
Tool 'delete_record' annotations are consistent annotation_checker · 80%
low
Tool 'package_install' has no annotations annotation_checker · 100%
info
Tool 'package_uninstall' annotations are consistent annotation_checker · 80%
info
Tool 'get_server_permissions' annotations are consistent annotation_checker · 80%
info
Tool 'run_code_analyzer' annotations are consistent annotation_checker · 80%
info
Tool 'list_code_analyzer_rules' annotations are consistent annotation_checker · 80%
info
Tool 'sobject_list' annotations are consistent annotation_checker · 80%
info
Tool 'sobject_describe' annotations are consistent annotation_checker · 80%
info
Tool 'search_records' annotations are consistent annotation_checker · 80%
info
Tool 'query_records' annotations are consistent annotation_checker · 80%
info
Tool 'query_records_to_file' annotations are consistent annotation_checker · 80%
info
Tool 'deploy_start' annotations are consistent annotation_checker · 80%
info
Tool 'schema_generate_tab' annotations are consistent annotation_checker · 80%
low
Tool 'bulk_insert_records' has no annotations annotation_checker · 100%
low
Tool 'bulk_update_records' has no annotations annotation_checker · 100%
low
Tool 'bulk_upsert_records' has no annotations annotation_checker · 100%
low
Tool 'bulk_delete_records' has no annotations annotation_checker · 100%
low
Tool 'bulk_hard_delete_records' has no annotations annotation_checker · 100%
low
Tool 'bulk_job_status' has no annotations annotation_checker · 100%
low
Tool 'bulk_job_results' has no annotations annotation_checker · 100%
low
Tool 'bulk_job_abort' has no annotations annotation_checker · 100%
low
Tool 'scanner_run' has no annotations annotation_checker · 100%
low
Tool 'scanner_run_dfa' has no annotations annotation_checker · 100%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.26.0 (GHSA-6qxp-vccf-f47h) dependency_analyzer · 95%
info
package.json metadata manifest_parser · 100%
info
Tool: generate_component manifest_parser · 85%
info
Tool: list_connected_salesforce_orgs manifest_parser · 85%
info
Tool: login_into_org manifest_parser · 85%
info
Tool: assign_permission_set manifest_parser · 85%
info
Tool: assign_permission_set_license manifest_parser · 85%
info
Tool: display_user manifest_parser · 85%
info
Tool: list_metadata manifest_parser · 85%
info
Tool: list_metadata_types manifest_parser · 85%
info
Tool: logout manifest_parser · 85%
info
Tool: open manifest_parser · 85%
info
Tool: get_default_org manifest_parser · 85%
info
Tool: set_default_org manifest_parser · 85%
info
Tool: clear_default_org manifest_parser · 85%
info
Tool: execute_anonymous_apex manifest_parser · 85%
info
Tool: run_apex_tests manifest_parser · 85%
info
Tool: get_apex_test_results manifest_parser · 85%
info
Tool: get_apex_code_coverage manifest_parser · 85%
info
Tool: generate_class manifest_parser · 85%
info
Tool: generate_trigger manifest_parser · 85%
info
Tool: apex_log_list manifest_parser · 85%
info
Tool: apex_get_log manifest_parser · 85%
info
Tool: open_record manifest_parser · 85%
info
Tool: create_record manifest_parser · 85%
info
Tool: update_record manifest_parser · 85%
info
Tool: delete_record manifest_parser · 85%
info
Tool: package_install manifest_parser · 85%
info
Tool: package_uninstall manifest_parser · 85%
info
Tool: get_server_permissions manifest_parser · 85%
info
Tool: run_code_analyzer manifest_parser · 85%
info
Tool: list_code_analyzer_rules manifest_parser · 85%
info
Tool: sobject_list manifest_parser · 85%
info
Tool: sobject_describe manifest_parser · 85%
info
Tool: search_records manifest_parser · 85%
info
Tool: query_records manifest_parser · 85%
info
Tool: query_records_to_file manifest_parser · 85%
info
Tool: deploy_start manifest_parser · 85%
info
Tool: schema_generate_tab manifest_parser · 85%
info
Tool: bulk_insert_records manifest_parser · 85%
info
Tool: bulk_update_records manifest_parser · 85%
info
Tool: bulk_upsert_records manifest_parser · 85%
info
Tool: bulk_delete_records manifest_parser · 85%
info
Tool: bulk_hard_delete_records manifest_parser · 85%
info
Tool: bulk_job_status manifest_parser · 85%
info
Tool: bulk_job_results manifest_parser · 85%
info
Tool: bulk_job_abort manifest_parser · 85%
info
Tool: scanner_run manifest_parser · 85%
info
Tool: scanner_run_dfa manifest_parser · 85%
info
Transport: stdio manifest_parser · 90%
info
Required env vars (8) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 70%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
critical
Tool poisoning in 'sobject_list': Directive language: 'always' poisoning · 85%
critical
Tool poisoning in 'sobject_describe': Directive language: 'always' poisoning · 85%
critical
Tool poisoning in 'query_records': Directive language: 'always' poisoning · 85%
critical
Tool poisoning in 'query_records_to_file': Directive language: 'always' poisoning · 85%
info
SBOM generated: 307 components sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%