b2c-cap
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill facilitates the ingestion of external data by pulling Commerce App sources from Salesforce B2C instances to the local filesystem using
b2c cap pull. \n - Ingestion points: Data is ingested from remote instances and stored in
./commerce-apps/{name}/.\n - Boundary markers: There are no specific instructions to treat the pulled content as untrusted or to use delimiters to prevent instruction injection from the app source data.\n
- Capability inventory: The skill uses the
b2cCLI which has capabilities for network communication (WebDAV, SCAPI) and filesystem access (read, write, package).\n - Sanitization: The skill does not mention sanitizing or validating the contents of the pulled app sources before they are processed or deployed.\n- [EXTERNAL_DOWNLOADS]: The skill mentions and recommends the use of
@salesforce/b2c-clivianpxand suggests installing additional plugins from theSalesforceCommerceCloudmarketplace. These resources are associated with the official vendor and provide standard functionality for the platform.\n- [COMMAND_EXECUTION]: The skill relies on executing theb2cCLI tool to perform operations like packaging, installing, and listing apps. These commands are typical for a development tool and are used here within their intended scope.
Audit Metadata