Skip to main content

b2c-custom-api-development

Guides the development of custom SCAPI endpoints for B2C Commerce, covering API contracts, implementations, and integrations.

Install this skill

or
82/100

Security score

The b2c-custom-api-development skill was audited on Feb 9, 2026 and we found 10 security issues across 2 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 381

Curl to non-GitHub URL

SourceSKILL.md
381TOKEN=$(curl -s "https://$SHORTCODE.api.commercecloud.salesforce.com/shopper/auth/v1/organizations/$ORG/oauth2/token" \
medium line 392

Curl to non-GitHub URL

SourceSKILL.md
392curl -s "https://$SHORTCODE.api.commercecloud.salesforce.com/custom/my-api/v1/organizations/$ORG/my-endpoint?siteId=$SITE" \
low line 15

External URL reference

SourceSKILL.md
15https://{shortCode}.api.commercecloud.salesforce.com/custom/{apiName}/{apiVersion}/organizations/{organizationId}/{endpointPath}
low line 58

External URL reference

SourceSKILL.md
58tokenUrl: https://{shortCode}.api.commercecloud.salesforce.com/shopper/auth/v1/organizations/{organizationId}/oauth2/token
low line 65

External URL reference

SourceSKILL.md
65tokenUrl: https://account.demandware.com/dwsso/oauth2/access_token
low line 358

External URL reference

SourceSKILL.md
358--redirect-uri http://localhost:3000/callback \
low line 381

External URL reference

SourceSKILL.md
381TOKEN=$(curl -s "https://$SHORTCODE.api.commercecloud.salesforce.com/shopper/auth/v1/organizations/$ORG/oauth2/token" \
low line 392

External URL reference

SourceSKILL.md
392curl -s "https://$SHORTCODE.api.commercecloud.salesforce.com/custom/my-api/v1/organizations/$ORG/my-endpoint?siteId=$SITE" \
low line 446

External URL reference

SourceSKILL.md
446<services xmlns="http://www.demandware.com/xml/impex/services/2014-09-26">
low line 449

External URL reference

SourceSKILL.md
449<url>https://api.example.com/v1</url>
Scanned on Feb 9, 2026
View Security Dashboard
Installation guide →