commerce-b2b-open-code-components-integrate
Pass
Audited by Gen Agent Trust Hub on Aug 7, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill clones a repository from the official Salesforce organization on GitHub (
github.com/forcedotcom/b2b-commerce-open-source-components). This is a trusted source and the operation is a core part of the skill's functionality to provide legitimate commerce components. - [COMMAND_EXECUTION]: The skill uses
git clone,cp, andsfCLI commands. These are standard developer tools for Salesforce development. The commands are scoped to project-specific paths and the skill includes explicit instructions to explain each command to the user and obtain approval before execution. - [SAFE]: The skill follows security best practices by validating project structure (reading
sfdx-project.json), providing clear user feedback, and including error handling for network or file system issues. It does not access sensitive credentials, exfiltrate data, or attempt to maintain persistence.
Audit Metadata