b2c-scapi-schemas
Pass
Audited by Gen Agent Trust Hub on May 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
b2cCLI tool (specifically@salesforce/b2c-cli) to interact with B2C Commerce API schemas. Commands are used to list, filter, and retrieve schema definitions. - [EXTERNAL_DOWNLOADS]: The skill suggests using
npx @salesforce/b2c-cli, which facilitates the download and execution of the official vendor package from the NPM registry. As this is an official package from the same vendor (Salesforce), it is considered a legitimate resource. - [DATA_EXPOSURE]: The skill references the use of
dw.jsonand specific environment variables (e.g.,SFCC_TENANT_ID,SFCC_SHORTCODE) for configuration. This follows the standard developer workflow for the Salesforce Commerce Cloud platform and includes instructions on how to handle tenant identification.
Audit Metadata