b2c-bm-users-roles
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill documents the use of the official
@salesforce/b2c-cli, which is a well-known administrative tool provided by the vendor for managing B2C Commerce instances. - [SAFE]: Authentication is handled through standard methods such as environment variables (
SFCC_*), configuration files (dw.json,~/.mobify), and OAuth tokens, which is consistent with secure development practices. - [SAFE]: Data manipulation tasks, such as updating role permissions via local JSON files, are standard administrative workflows and do not involve untrusted remote sources or dangerous dynamic execution.
- [SAFE]: The skill instructs users on rotating access keys for surfaces like WebDAV and OCAPI, promoting security hygiene for SSO-managed identities.
Audit Metadata