b2c-forms

Pass

Audited by Gen Agent Trust Hub on Sep 24, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides technical instructions and code snippets for Salesforce B2C Commerce development. All code examples (XML, JavaScript, ISML) follow standard vendor-recommended patterns (SFRA).
  • [COMMAND_EXECUTION]: The documentation mentions a CLI command b2c docs schema form in references/FORM-XML.md. This is presented as a way for developers to view local documentation and is associated with the vendor's own tooling.
  • [DATA_EXPOSURE_EXFILTRATION]: No sensitive file paths, hardcoded credentials, or unauthorized network operations were detected. The form examples use standard resource keys for labels and handle customer profile data using local platform APIs (dw/system/Transaction).
  • [INDIRECT_PROMPT_INJECTION]: The skill acts as a technical reference. While it processes user queries to provide code templates, it does not ingest untrusted remote data or provide unsafe execution surfaces for third-party content. Boundary markers and sanitization are handled by the underlying Salesforce platform logic described in the templates.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 24, 2026, 02:40 PM