b2c-scapi-custom
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides numerous examples of using the
b2cCLI andnpx @salesforce/b2c-clifor managing API endpoints. - These are legitimate uses of the Salesforce Commerce Cloud development tools.
- Commands like
b2c scapi custom statusandb2c setup inspectare standard for the intended administrative and debugging use cases. - [CREDENTIALS_UNSAFE]: The documentation discusses the use of
clientSecretandSFCC_*environment variables. - It correctly points out that secrets are masked by default in tool output (
b2c setup inspect). - It follows best practices by recommending the use of
dw.jsonand environment variables rather than hardcoding credentials directly into command flags.
Audit Metadata