b2c-slas

Pass

Audited by Gen Agent Trust Hub on Oct 14, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the agent to use npx @salesforce/b2c-cli if the CLI is not installed globally. This package belongs to the official Salesforce organization on the NPM registry.
  • [COMMAND_EXECUTION]: The skill utilizes the b2c command-line tool to interact with Salesforce Commerce Cloud APIs. The commands are specific to managing SLAS clients and obtaining shopper tokens as described in the skill's purpose.
  • [SAFE]: No prompt injection, obfuscation, or unauthorized data exfiltration patterns were found. Secret management (like rotating client secrets) is handled through standard CLI flags, and examples use appropriate placeholders like sk_xxx or secret.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 14, 2026, 08:16 PM