sfnext-project-setup

Pass

Audited by Gen Agent Trust Hub on Sep 25, 2026

Risk Level: SAFENO_CODE
Full Analysis
  • [SAFE]: The skill provides documentation and examples for creating a new storefront project. It uses standard developer commands like pnpm dlx to invoke the official @salesforce/storefront-next-dev package. This aligns with the intended purpose of a project setup guide from Salesforce Commerce Cloud.- [SAFE]: Environment variable management follows security best practices by distinguishing between client-side public variables (PUBLIC__ prefix) and server-side secrets. The documentation uses safe placeholders like your-client-id and your-slas-secret rather than hardcoding actual credentials.- [NO_CODE]: The skill contains only instructional markdown files and reference documentation. It does not include any executable scripts, binary files, or automated execution logic that would pose a runtime risk.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 25, 2026, 05:38 AM