sfcc-ocapi-scapi
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill establishes an integration layer that ingests data from external Salesforce Commerce Cloud endpoints, creating a potential surface for indirect prompt injection if those sources are compromised.
- Ingestion points: Data is ingested from external API responses in
lib/sfcc-products.ts(search and product details) andlib/sfcc-ocapi.ts(order retrieval). - Boundary markers: The code templates do not include explicit delimiters or instructions for the AI to ignore content embedded within the retrieved commerce data.
- Capability inventory: The skill possesses significant capabilities including network write operations via
fetch(POST, PUT, PATCH) to modify baskets, submit orders, and update fulfillment statuses. - Sanitization: The provided examples do not demonstrate sanitization or structural validation of the incoming JSON data before it is used in subsequent logic.
Audit Metadata