b2c-config

Pass

Audited by Gen Agent Trust Hub on Sep 25, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructs the AI agent on how to use various b2c CLI commands to manage configuration, authentication, and environment settings. These commands are standard operations for Salesforce B2C Commerce development.\n- [EXTERNAL_DOWNLOADS]: The skill references the @salesforce/b2c-cli Node.js package, which is a trusted resource from the official Salesforce organization. It provides instructions to use npx to execute the CLI tool if it is not already installed locally.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes configuration data from project-local files such as dw.json, .env, and package.json. \n
  • Ingestion points: Configuration fields are read from dw.json, .env, package.json, and ~/.mobify (referenced in SKILL.md).\n
  • Boundary markers: The documentation highlights that the b2c setup inspect command redacts sensitive values by default.\n
  • Capability inventory: The skill enables the agent to execute shell commands via the b2c CLI, which can interact with local files and remote B2C Commerce APIs.\n
  • Sanitization: The underlying CLI tool provides automated normalization of tenant identifiers and masks secrets during routine inspection.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 25, 2026, 05:38 AM