b2c-logs
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill relies on the
b2cCLI tool (available via@salesforce/b2c-cli) to interact with B2C Commerce instances. This includes commands for log retrieval, listing, and WebDAV file access. - [INDIRECT_PROMPT_INJECTION]: The skill processes server logs, which are external data sources that may contain untrusted content (e.g., user-supplied data reflected in error messages). \n
- Ingestion points: Server log data ingested through
b2c logs getandb2c logs tail(SKILL.md).\n - Boundary markers: Promotes the use of the
--jsonflag to return structured data, which helps separate log metadata from raw message content.\n - Capability inventory: The skill allows the agent to execute CLI commands and perform network operations to communicate with Salesforce instances.\n
- Sanitization: Not explicitly mentioned; the agent is expected to parse and interpret the log messages as provided by the CLI tool.
Audit Metadata