sf-b2c-scapi

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). The required workflow instructs runtime WebFetch of public documentation pages (e.g., developer.salesforce.com/docs/... and github.com/...), which are outsider-authored free text that can be ingested into the agent’s LLM context.

MEDIUM W009: Direct money access capability detected (payment gateways, crypto, banking).

• Direct money access detected (high risk: 1.00). The skill is explicitly for Salesforce Commerce API (SCAPI) and lists API families and operations that perform commerce transactions: Shopper Baskets (shipping, payment), Shopper Orders ("Create order from basket"), Shopper Customers (payment methods), and Shopper Gift Certificates (balance check, redemption). It also documents SLAS OAuth flows including client_credentials for server-to-server integrations. These are specific, purpose-built APIs for executing payments/orders and redeeming gift certificates (i.e., moving money/value), not generic tooling, so it grants direct financial execution capability.