b2c-code
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill has an attack surface through the ingestion of cartridge code during deployment and download tasks. Ingestion points: local file system and remote instances. Boundary markers: none. Capability inventory: b2c CLI commands. Sanitization: none. This surface is expected for the skill's purpose.
- [DATA_EXPOSURE]: The documentation references standard credential locations and features of the b2c CLI that interact with configuration secrets, which is consistent with its role as a development tool.
Audit Metadata