commerce-b2b-store-create
Pass
Audited by Gen Agent Trust Hub on Aug 7, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the Salesforce CLI (
sf) to execute commands such assf org list metadataandsf project retrieve start. These tools are standard for Salesforce development and are used within their intended scope to manage platform metadata. - [PROMPT_INJECTION]: The workflow involves user input for store names and selections from retrieved site lists. These inputs are interpolated into CLI commands in Step 6. However, the skill explicitly includes validation steps where the agent confirms the store name format and ensures user selections match the available sites retrieved from the org, which serves to sanitize the input before execution.
Audit Metadata