b2c-logging
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill documentation and code snippets strictly follow the official Salesforce B2C Commerce Script API for logging (dw.system.Logger, dw.system.Log).
- [SAFE]: The skill includes a 'Best Practices' section in SKILL.md that explicitly warns against logging sensitive information like credit card numbers, which is a positive security practice.
- [INDIRECT_PROMPT_INJECTION]: The skill documents logging application data. 1. Ingestion points: Logger methods in SKILL.md accept application variables like cart contents and order numbers. 2. Boundary markers: The skill recommends using JSON.stringify for complex objects. 3. Capability inventory: Logging operations are restricted to platform-managed log files via the dw.system.Logger API as described in SKILL.md and LOG-FILES.md. 4. Sanitization: The skill provides guidance on masking sensitive data before logging.
Audit Metadata