b2c-logs

Warn

Audited by Snyk on Apr 15, 2026

Risk Level: MEDIUM
Full Analysis

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

  • Potentially malicious external URL detected (high risk: 0.80). The skill directs running "npx @salesforce/b2c-cli" (which fetches and executes the @salesforce/b2c-cli package from the npm registry at runtime, e.g. https://registry.npmjs.org/@salesforce/b2c-cli), and the skill relies on that external CLI code to perform its functionality, so remote code is fetched-and-executed during runtime.

Issues (1)

W012
MEDIUM

Unverifiable external dependency detected (runtime URL that controls agent).

Audit Metadata
Risk Level
MEDIUM
Analyzed
Apr 15, 2026, 04:00 PM
Issues
1
Security Audit — snyk — b2c-logs