b2c-scapi-shopper
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides technical documentation and integration examples for Salesforce B2C Commerce Shopper APIs. All referenced APIs and tools belong to the official vendor and established services.
- [INDIRECT_PROMPT_INJECTION]: The skill provides patterns for fetching and processing data from external API endpoints. 1. Ingestion points: API responses from fetch calls in references/CHECKOUT-FLOW.md and references/CLIENT-EXAMPLES.md. 2. Boundary markers: None present in the code examples. 3. Capability inventory: The skill uses fetch for network operations; no file-write or subprocess capabilities are defined in the provided scripts. 4. Sanitization: Documentation explicitly advises using tokenized payment data instead of raw credit card information.
Audit Metadata