@salesforce/b2c-cli@2.2.1
A Salesforce B2C Commerce CLI
AI Security Review
scanned 1mo ago · by lpm-firewall-aiThe source establishes an explicit agent-skill installation capability that can alter IDE agent skill locations. It is not an npm lifecycle attack, but policy classifies explicit user-command agent configuration mutation as a warning.
Static reason
One or more suspicious static signals were detected.
Trigger
A user runs the setup skills command and selects a skill set and target IDE.
Impact
Downloaded skill content can modify configured AI-agent skill locations selected by the caller.
Mechanism
The command downloads skill artifacts, scans them, then invokes an installer with selected IDE, scope, project, and update settings.
AI rationale
The source establishes an explicit agent-skill installation capability that can alter IDE agent skill locations. It is not an npm lifecycle attack, but policy classifies explicit user-command agent configuration mutation as a warning.
Evidence
dist/commands/setup/skills.js
Decision evidence
public snapshotAI called this Suspicious at 91.0% confidence as Dangerous Capability with low false-positive risk.
Evidence for warning
- The package declares an oclif command-based CLI.
- The setup skills command is expressly intended to install agent skills for AI-powered IDEs.
- That command downloads skill artifacts and scans them before installation.
- It passes selected IDEs, global scope, project root, and update options to the installer.
Evidence against
- The behavior is activated by an explicit setup command, not an npm lifecycle hook.
- Interactive use presents a confirmation before installation unless the caller supplies the force option.
Behavioral surface
CryptoEnvironmentVarsFilesystemNetwork
HighEntropyStringsUrlStrings
Source & flagged code
5 flaggeddist/commands/_test/index.jsView file
30patternName = generic_password
severity = medium
line = 30
Medium
Secret Pattern
Package contains a possible secret pattern.
dist/commands/_test/index.jsView on unpkg · L30bin/dev.cmdView file
•path = bin/dev.cmd
kind = build_helper
sizeBytes = 193
magicHex = [redacted]
Medium
package.jsonView file
77"main": "dist/index.js",
"type": "module",
"oclif": {
"bin": "b2c",
"dirname": "b2c",
"commands": "./dist/commands",
"telemetry": {
"connectionString": "InstrumentationKey=6fcc215f-0b11-4864-ad5c-3945ae19e2f3;IngestionEndpoint=https://eastus-8.in.applicationinsights.azure.com/;LiveEndpoint=https://eastus.livediagnostics.monitor.azure.com/;ApplicationId=a60f17ec-265a-4dfc-b8df-03a64695697d"
},
"plugins": [
"@oclif/plugin-help",
"
Findings
8 Medium4 Low
MediumSecret Patterndist/commands/_test/index.js
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperbin/dev.cmd
MediumStructural Risk Force Deep Review
MediumAi Review Evidencepackage.json
MediumAi Review Evidencedist/commands/setup/skills.js
MediumAi Review Evidencedist/commands/setup/skills.js
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @salesforce/b2c-cli@2.2.1.
See all versions of @salesforce/b2c-cli for other recorded verdicts.
- Review the evidence and your use of @salesforce/b2c-cli@2.2.1 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.