The Agent Skills Directory

[SAFE]: No security issues were detected in this skill. The instructions and scripts provided are consistent with standard deployment workflows for Storefront Next projects.
[COMMAND_EXECUTION]: The skill documents standard build and deployment commands such as pnpm build, pnpm push, and pnpm sfnext push. These are routine operations for managing storefront bundles and do not involve arbitrary command injection or suspicious execution patterns.
[CREDENTIALS_UNSAFE]: The documentation includes examples of environment variables and API credentials. All sensitive fields use descriptive placeholders (e.g., prod-client-id, production-slas-secret, prod-short-code) rather than actual secrets. The skill correctly advises using the MRT Dashboard or local .env files for sensitive configuration, which aligns with secure development practices.
[REMOTE_CODE_EXECUTION]: There are no patterns of remote code execution, such as piped shell downloads or dynamic execution of untrusted external scripts. The use of the sfnext CLI is a legitimate vendor-provided tool for the Salesforce Commerce Cloud ecosystem.

sfnext-deployment