b2c-metrics
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references the installation and use of
@salesforce/b2c-cliand@salesforce/b2c-tooling-sdk. These packages are official tools provided by a well-known service. - [COMMAND_EXECUTION]: Provides instructions for executing the
b2ccommand-line interface to query observability metrics. This is the primary intended function of the skill. - [INDIRECT_PROMPT_INJECTION]: The skill documents how to ingest time-series observability data from an external API. 1. Ingestion points: Metric data is retrieved from the SCAPI Metrics API (
observability/metrics/v1) as described in SKILL.md. 2. Boundary markers: None explicitly defined in the skill instructions for the ingested data. 3. Capability inventory: The skill uses theb2cCLI for data retrieval and display. 4. Sanitization: The skill processes structured numeric and time-series data intended for performance monitoring, which presents a minimal injection surface.
Audit Metadata