@salesforce/b2c-cli@2.1.0
A Salesforce B2C Commerce CLI
AI Security Review
scanned 1mo ago · by lpm-firewall-aiThe package is not malicious based on the inspected source, but its explicit command can alter AI-agent skill configuration in project or global locations. Policy classifies this guarded user-command capability as a non-blocking warning.
Static reason
One or more suspicious static signals were detected.
Trigger
A user runs the setup:skills command and confirms it, or deliberately supplies its force option.
Impact
This is a user-invoked capability to modify AI-agent skill locations; it can affect agent behavior if the user selects a project or global destination.
Mechanism
The command downloads and scans selected skill sets, then delegates installation to the SDK with the chosen IDE and scope.
AI rationale
The package is not malicious based on the inspected source, but its explicit command can alter AI-agent skill configuration in project or global locations. Policy classifies this guarded user-command capability as a non-blocking warning.
Evidence
dist/commands/setup/skills.js
Decision evidence
public snapshotAI called this Suspicious at 87.0% confidence as Dangerous Capability with low false-positive risk.
Evidence for warning
- The manifest contains build, test, and development scripts, with no npm install lifecycle hook.
- The setup:skills command is designed to install skills for AI-powered IDEs, including a global option.
- The command previews its target scope and requests confirmation before installation unless force is supplied.
- The command invokes the SDK skill installer only after its command-specific selection flow.
Evidence against
- No hidden install-time execution, credential forwarding, shell execution, or reviewer-directed text was found in the inspected active paths.
Behavioral surface
CryptoEnvironmentVarsFilesystemNetwork
HighEntropyStringsUrlStrings
Source & flagged code
5 flaggeddist/commands/_test/index.jsView file
30patternName = generic_password
severity = medium
line = 30
Medium
Secret Pattern
Package contains a possible secret pattern.
dist/commands/_test/index.jsView on unpkg · L30bin/dev.cmdView file
•path = bin/dev.cmd
kind = build_helper
sizeBytes = 193
magicHex = [redacted]
Medium
package.jsonView file
382"scripts": {
"build": "shx rm -rf dist && tsc -p tsconfig.build.json && shx mkdir -p dist/script-types/node_modules/@salesforce/b2c-script-types && shx cp -r ../b2c-script-types/types dist/script-types/node_modules/@salesforce/b2c-script-types/types && shx cp -r ../b2c-script-types/plugin dist/script-types/node_modules/@salesforce/b2c-script-types/plugin && shx cp ../b2c-script-types/package.json dist/script-types/node_modules/@salesforce/b2c-script-types/package.json",
"lint": "eslint",
"lint:agent":
Findings
8 Medium4 Low
MediumSecret Patterndist/commands/_test/index.js
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperbin/dev.cmd
MediumStructural Risk Force Deep Review
MediumSuspicious Lifecycle Evidencepackage.json
MediumAi Review Evidencedist/commands/setup/skills.js
MediumAi Review Evidencedist/commands/setup/skills.js
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @salesforce/b2c-cli@2.1.0.
See all versions of @salesforce/b2c-cli for other recorded verdicts.
- Review the evidence and your use of @salesforce/b2c-cli@2.1.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.