Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add OrcaQubits/agentic-commerce-skills-plugins --skill sf-b2c-ismlgit clone --depth 1 https://github.com/OrcaQubits/agentic-commerce-skills-pluginsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/orcaqubits/agentic-commerce-skills-plugins/sf-b2c-isml)<a href="https://agentmods.dev/skills/orcaqubits/agentic-commerce-skills-plugins/sf-b2c-isml"><img src="https://agentmods.dev/badge/skills/orcaqubits/agentic-commerce-skills-plugins/sf-b2c-isml/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/orcaqubits/agentic-commerce-skills-plugins/sf-b2c-isml"><img src="https://agentmods.dev/badge/skills/orcaqubits/agentic-commerce-skills-plugins/sf-b2c-isml.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00068 | $0.02010 |
| Opus 5.5 | $0.00027 | $0.00804 |
| Sonnet 5.5 | $0.00014 | $0.00402 |
| Haiku 4.5 | $0.00007 | $0.00201 |
Grade A, and why
sf-b2c-isml scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 1mo ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 192 lines — stays where its author put it; the contents beside it link to each section on GitHub.
sf-b2c-isml
Build ISML (Internet Store Markup Language) templates for Salesforce B2C Commerce storefronts.
Before Writing Code
Fetch live documentation FIRST:
- Search: "Salesforce B2C Commerce ISML reference 2026"
- Search: "B2C Commerce template best practices encoding modes"
- WebFetch: Official ISML tag reference from Salesforce docs
- WebFetch: Template best practices and encoding guidelines
Why: ISML syntax, tag attributes, encoding modes, and localization patterns evolve with each B2C Commerce release. Always verify current specs before generating template code.
Conceptual Architecture
ISML Key Tags
| Tag | Purpose | Key Attributes |
|---|---|---|
<isprint> |
Output with encoding | value, encoding (required for XSS safety) |
<isif> / <iselseif> / <iselse> |
Conditional rendering | condition |
<isloop> |
Iteration | items, var, status, begin, end, step |
<isset> |
Variable assignment | name, value, scope (page/request/session) |
<isinclude> |
Include partial template | template (path) or url (controller action) |
<isdecorate> |
Decorator/layout wrapper | template (decorator path) |
<isreplace> |
Insertion point in decorator | (no attributes) |
<isslot> |
Content slot | id, context (category/folder/global), description |
<iscache> |
Template-level caching | type, hour, varyby |
<isscript> |
Inline server-side JS | (use sparingly -- prefer controllers) |
<iscontent> |
Set content type/charset | type, charset |
<isstatus> |
Set HTTP status code | code |
<isredirect> |
Server-side redirect | location |
<iscomment> |
Server-side comment | (not rendered to client) |
Encoding Modes for <isprint>
| Mode | Context | When to Use |
|---|---|---|
htmlcontent |
HTML body text | Default for most output (de facto SFRA standard) |
htmlsinglequote |
Single-quoted HTML attributes | <div title='...'> |
htmldoublequote |
Double-quoted HTML attributes | <div title="..."> |
htmlunquote |
Unquoted HTML attributes | Rarely needed; prefer quoted attributes |
jshtml |
JavaScript strings in HTML | <script>var x = '...';</script> |
jsattribute |
JS in HTML event attributes | onclick="..." |
jsonvalue |
JSON values | JSON data output |
uricomponent |
URL query parameters | Query string values |
uristrict |
Full URI encoding | Path segments |
xmlcontent |
XML body content | XML/RSS feeds |
off |
No encoding | Trusted content ONLY -- avoid in production |
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 1mo ago First seen · 192 lines · 68 tokens per session scan A 545d082bf902
sf-b2c-isml is a skill published in the GitHub repository OrcaQubits/agentic-commerce-skills-plugins (40 stars, last pushed 1mo ago), licensed MIT. It adds 68 tokens to every session and 2,010 once invoked, about $0.0003 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-15.
Other skills, from other repositories
mppx
TypeScript SDK for the Payment HTTP Authentication Scheme. Handles 402 Payment Required flows with Tempo, Stripe, and other payment methods. Use when integrating payments or mppx into a client or server application.
shopify
Expert Shopify theme development guidelines for Liquid, Online Store 2.0, CSS, JavaScript, and UX best practices.
shopify-theme-optimization
Theme speed and UX optimization — Core Web Vitals, Liquid code, image loading, mobile responsiveness.
metengine-data-agent
Real-time smart money analytics API for Polymarket prediction markets, Hyperliquid perpetual futures, and Meteora Solana LP/AMM pools. 63 endpoints. Pay-per-request via x402 on Solana Mainnet USDC. No API keys.
internet-court
Entry point for Internet Court — the trust layer for agent-to-agent commerce. Use whenever an agent needs to transact with another agent or a paid service, or a user mentions agent payments, paid APIs (HTTP 402/x402), wallet custody or trust concerns, spending mandates, delegated permissions (ERC-7710/7715), escrow…
magento-module-development
Build custom Magento 2 modules using dependency injection, plugins, observers, and service contracts to extend core functionality cleanly.