b2c-slas

Pass

Audited by Gen Agent Trust Hub on Jun 17, 2026

Risk Level: SAFECOMMAND_EXECUTIONCREDENTIALS_UNSAFEEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill documents the use of the b2c CLI tool for managing infrastructure and authentication clients. It includes commands for creating, updating, and deleting security configurations.
  • [CREDENTIALS_UNSAFE]: The instructions describe how to provide and manage sensitive information such as client secrets and shopper passwords via CLI flags (e.g., --slas-client-secret, --shopper-password). It also explains how to use the --unmask flag with the b2c setup inspect command to reveal stored configuration secrets.
  • [EXTERNAL_DOWNLOADS]: The skill suggests using npx @salesforce/b2c-cli, which involves fetching the official CLI tool from the Salesforce organization's public npm registry.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 17, 2026, 11:38 PM
Security Audit — agent-trust-hub — b2c-slas