b2c-config
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the AI agent on how to use various
b2cCLI commands to manage configuration, authentication, and environment settings. These commands are standard operations for Salesforce B2C Commerce development.\n- [EXTERNAL_DOWNLOADS]: The skill references the@salesforce/b2c-cliNode.js package, which is a trusted resource from the official Salesforce organization. It provides instructions to usenpxto execute the CLI tool if it is not already installed locally.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes configuration data from project-local files such asdw.json,.env, andpackage.json. \n - Ingestion points: Configuration fields are read from
dw.json,.env,package.json, and~/.mobify(referenced in SKILL.md).\n - Boundary markers: The documentation highlights that the
b2c setup inspectcommand redacts sensitive values by default.\n - Capability inventory: The skill enables the agent to execute shell commands via the
b2cCLI, which can interact with local files and remote B2C Commerce APIs.\n - Sanitization: The underlying CLI tool provides automated normalization of tenant identifiers and masks secrets during routine inspection.
Audit Metadata