cclabsnz/sf-audit-plugin
Read-only Salesforce security audit plugin for the sf CLI: 109 checks, A-F grade with its reason, attack-chain correlation, SARIF output, accepted-risk waivers, compliance mapping, free EventLogFile capture, and Guest User Anomaly investigation.
🎯 Vulnerability: Remote Code Execution (RCE)
💡 Defense Fix: Avoid executing shell commands via system(). Use parameterized APIs and strict input sanitization.