The Agent Skills Directory

[COMMAND_EXECUTION]: The skill uses the b2c CLI tool (or @salesforce/b2c-cli via npx) to interact with Salesforce B2C Commerce instances. It executes commands to list sites, retrieve configuration JSON, and modify cartridge paths.
[EXTERNAL_DOWNLOADS]: The skill recommends the use of npx @salesforce/b2c-cli to ensure the management tool is available. This fetches the package from the official NPM registry under the recognized Salesforce organization.
[INDIRECT_PROMPT_INJECTION]: The skill ingests data from external B2C Commerce instances which could theoretically be manipulated to contain malicious instructions.
Ingestion points: Storefront metadata and site configuration objects are retrieved through the b2c sites list --json and b2c sites cartridges list commands.
Boundary markers: The instructions do not provide explicit delimiters or warnings for the agent to ignore instructions that might be embedded in the site names or configuration values.
Capability inventory: The skill can execute various CLI commands to modify instance state, such as b2c sites cartridges set, and has access to environment variables and configuration files (.env, dw.json).
Sanitization: The skill lacks explicit sanitization or validation steps for the site data retrieved from the server before it is processed by the agent.

b2c-sites