b2c-slas
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to use
npx @salesforce/b2c-cliif the CLI is not installed globally. This package belongs to the official Salesforce organization on the NPM registry. - [COMMAND_EXECUTION]: The skill utilizes the
b2ccommand-line tool to interact with Salesforce Commerce Cloud APIs. The commands are specific to managing SLAS clients and obtaining shopper tokens as described in the skill's purpose. - [SAFE]: No prompt injection, obfuscation, or unauthorized data exfiltration patterns were found. Secret management (like rotating client secrets) is handled through standard CLI flags, and examples use appropriate placeholders like
sk_xxxorsecret.
Audit Metadata