b2c-cap

Pass

Audited by Gen Agent Trust Hub on Sep 25, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill facilitates the ingestion of external data by pulling Commerce App sources from Salesforce B2C instances to the local filesystem using b2c cap pull. \n
  • Ingestion points: Data is ingested from remote instances and stored in ./commerce-apps/{name}/.\n
  • Boundary markers: There are no specific instructions to treat the pulled content as untrusted or to use delimiters to prevent instruction injection from the app source data.\n
  • Capability inventory: The skill uses the b2c CLI which has capabilities for network communication (WebDAV, SCAPI) and filesystem access (read, write, package).\n
  • Sanitization: The skill does not mention sanitizing or validating the contents of the pulled app sources before they are processed or deployed.\n- [EXTERNAL_DOWNLOADS]: The skill mentions and recommends the use of @salesforce/b2c-cli via npx and suggests installing additional plugins from the SalesforceCommerceCloud marketplace. These resources are associated with the official vendor and provide standard functionality for the platform.\n- [COMMAND_EXECUTION]: The skill relies on executing the b2c CLI tool to perform operations like packaging, installing, and listing apps. These commands are typical for a development tool and are used here within their intended scope.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 25, 2026, 05:38 AM