b2c-metrics

Pass

Audited by Gen Agent Trust Hub on Sep 25, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill references the installation and use of @salesforce/b2c-cli and @salesforce/b2c-tooling-sdk. These packages are official tools provided by a well-known service.
  • [COMMAND_EXECUTION]: Provides instructions for executing the b2c command-line interface to query observability metrics. This is the primary intended function of the skill.
  • [INDIRECT_PROMPT_INJECTION]: The skill documents how to ingest time-series observability data from an external API. 1. Ingestion points: Metric data is retrieved from the SCAPI Metrics API (observability/metrics/v1) as described in SKILL.md. 2. Boundary markers: None explicitly defined in the skill instructions for the ingested data. 3. Capability inventory: The skill uses the b2c CLI for data retrieval and display. 4. Sanitization: The skill processes structured numeric and time-series data intended for performance monitoring, which presents a minimal injection surface.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 25, 2026, 05:38 AM