b2c-mrt
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSCREDENTIALS_UNSAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill facilitates the execution of the
b2cCLI tool to perform administrative and deployment tasks for Managed Runtime (MRT) projects, including environment variable management and deployment invalidation.\n- [EXTERNAL_DOWNLOADS]: The skill utilizes the@salesforce/b2c-clipackage via npx, which is the official tool provided for interacting with Managed Runtime services.\n- [CREDENTIALS_UNSAFE]: The skill accesses sensitive local configuration files such as~/.mobifyanddw.jsonto resolve MRT API keys. It also includes instructions for unmasking secrets using CLI flags for configuration inspection.\n- [INDIRECT_PROMPT_INJECTION]: The skill ingests configuration data from local files, creating a potential surface for indirect prompt injection.\n - Ingestion points:
dw.json,package.json, and~/.mobifyfiles.\n - Boundary markers: None present.\n
- Capability inventory: Shell command execution via
b2cCLI.\n - Sanitization: None present.
Audit Metadata