The Agent Skills Directory

[COMMAND_EXECUTION]: The skill utilizes the Salesforce CLI (sf) to perform metadata operations. It executes sf org list metadata to discover digital experience configurations and sf project retrieve start to fetch the DigitalExperienceBundle. These are standard developer tools and workflows for the Salesforce platform.
[PROMPT_INJECTION]: The skill has a surface for indirect prompt injection (Category 8) because it processes metadata names retrieved from a Salesforce organization. 1. Ingestion points: Output from the sf org list metadata command in Step 4 of SKILL.md. 2. Boundary markers: Absent; the instructions do not include specific delimiters or directives to ignore instructions that might be contained within the metadata names. 3. Capability inventory: The skill executes shell commands via the Salesforce CLI (SKILL.md). 4. Sanitization: No validation or sanitization logic is specified for the metadata names retrieved from the environment before they are displayed or used.
[COMMAND_EXECUTION]: The skill generates shell commands dynamically by interpolating user-provided input (the selected site name) into the sf project retrieve command in Step 6. While standard for CLI-based workflows, this represents a point where external strings enter the shell execution context.

creating-b2b-commerce-store