b2c-logs
Warn
Audited by Snyk on Apr 15, 2026
Risk Level: MEDIUM
Full Analysis
MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).
- Potentially malicious external URL detected (high risk: 0.80). The skill directs running "npx @salesforce/b2c-cli" (which fetches and executes the @salesforce/b2c-cli package from the npm registry at runtime, e.g. https://registry.npmjs.org/@salesforce/b2c-cli), and the skill relies on that external CLI code to perform its functionality, so remote code is fetched-and-executed during runtime.
Issues (1)
W012
MEDIUMUnverifiable external dependency detected (runtime URL that controls agent).
Audit Metadata