sfnext-project-setup
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [SAFE]: The skill provides documentation and examples for creating a new storefront project. It uses standard developer commands like
pnpm dlxto invoke the official@salesforce/storefront-next-devpackage. This aligns with the intended purpose of a project setup guide from Salesforce Commerce Cloud.- [SAFE]: Environment variable management follows security best practices by distinguishing between client-side public variables (PUBLIC__prefix) and server-side secrets. The documentation uses safe placeholders likeyour-client-idandyour-slas-secretrather than hardcoding actual credentials.- [NO_CODE]: The skill contains only instructional markdown files and reference documentation. It does not include any executable scripts, binary files, or automated execution logic that would pose a runtime risk.
Audit Metadata