@salesforce/b2c-cli@2.3.0
A Salesforce B2C Commerce CLI
AI Security Review
scanned 1mo ago · by lpm-firewall-aiSource shows explicit, normally confirmed installation of downloaded AI-agent skills, which the supplied policy classifies as a capability warning. No evidence supports malicious intent or publication blocking.
Static reason
One or more suspicious static signals were detected.
Trigger
The user invokes b2c setup skills and confirms installation or supplies force.
Impact
Installed skills can affect subsequent agent behavior in the selected project or user scope.
Mechanism
Selected downloaded skills are passed to the SDK installer with IDE, scope, overwrite, and directory options.
AI rationale
Source shows explicit, normally confirmed installation of downloaded AI-agent skills, which the supplied policy classifies as a capability warning. No evidence supports malicious intent or publication blocking.
Evidence
dist/commands/setup/skills.js.agents/skills
Decision evidence
public snapshotAI called this Suspicious at 93.0% confidence as Dangerous Capability with high false-positive risk.
Evidence for warning
- package.json exposes the b2c CLI; no npm install lifecycle hooks or runtime self-dependency were found.
- The explicit setup skills command downloads selected skill artifacts.
- Installation targets include Claude Code, Cursor, Codex, and other AI-enabled IDEs.
- The command confirms installation unless the caller supplies force.
- The installation call passes selected IDEs, global scope, update choice, and project or custom directory to the SDK.
Evidence against
- No covert installation, credential exfiltration, or malicious payload execution was established.
- Agent skill installation requires an explicit user command and normally asks for confirmation.
Behavioral surface
CryptoEnvironmentVarsFilesystemNetwork
HighEntropyStringsUrlStrings
Source & flagged code
5 flaggeddist/commands/_test/index.jsView file
30patternName = generic_password
severity = medium
line = 30
Medium
Secret Pattern
Package contains a possible secret pattern.
dist/commands/_test/index.jsView on unpkg · L30bin/dev.cmdView file
•path = bin/dev.cmd
kind = build_helper
sizeBytes = 193
magicHex = [redacted]
Medium
package.jsonView file
6"bin": {
"b2c": "./bin/run.js"
},
"bugs": "https
Medium
Findings
8 Medium4 Low
MediumSecret Patterndist/commands/_test/index.js
MediumNetwork
MediumEnvironment Vars
MediumShips Build Helperbin/dev.cmd
MediumStructural Risk Force Deep Review
MediumSuspicious Lifecycle Evidencepackage.json
MediumAi Review Evidencedist/commands/setup/skills.js
MediumAi Review Evidencedist/commands/setup/skills.js
LowScripts Present
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
Affected versions and remediation
This report applies to @salesforce/b2c-cli@2.3.0.
See all versions of @salesforce/b2c-cli for other recorded verdicts.
- Review the evidence and your use of @salesforce/b2c-cli@2.3.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.