Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/taurgis/sfcc-dev-mcp/sfcc-script-evaluationnpx skills add taurgis/sfcc-dev-mcp --skill sfcc-script-evaluationgit clone --depth 1 https://github.com/taurgis/sfcc-dev-mcpWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/taurgis/sfcc-dev-mcp/sfcc-script-evaluation)<a href="https://agentmods.dev/skills/taurgis/sfcc-dev-mcp/sfcc-script-evaluation"><img src="https://agentmods.dev/badge/skills/taurgis/sfcc-dev-mcp/sfcc-script-evaluation.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00025 | $0.02444 |
| Opus 5 | $0.00013 | $0.01222 |
| Sonnet 5 | $0.00005 | $0.00489 |
| Haiku 4.5 | $0.00003 | $0.00244 |
Grade A, and why
sfcc-script-evaluation scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 6d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 382 lines — stays where its author put it; the contents beside it link to each section on GitHub.
SFCC Script Evaluation Skill
This skill documents how to use the evaluate_script tool effectively for executing JavaScript code on an SFCC instance via the script debugger.
Overview
The evaluate_script tool allows you to execute arbitrary JavaScript code on an SFCC sandbox instance. It works by:
- Creating a debugger session
- Setting a breakpoint on a controller
- Triggering the controller via HTTP
- Evaluating your expression in the halted context
- Returning the result and cleaning up
Required Parameters
| Parameter | Required | Default | Description |
|---|---|---|---|
script |
Yes | - | The JavaScript code to execute |
siteId |
No | RefArch |
The site ID (accepts either RefArch or Sites-RefArch-Site) |
locale |
No | default |
Storefront locale segment used when triggering the controller (tries without locale first, then retries with /{locale} if needed) |
timeout |
No | 30000 |
Maximum execution time in milliseconds |
breakpointFile |
No | Auto-detected | Custom controller path for breakpoint |
breakpointLine |
No | 1,10,20,30,40,50 |
Specific line for a single breakpoint; if omitted, strategic lines (1,10,20,30,40,50) are used |
triggerUrl |
No | Auto-detected | Custom storefront URL or path to trigger; site-relative paths are resolved to https://{hostname}/s/{siteId}/... |
Script Syntax Rules
✅ DO: Use expressions that return a value
The last expression in your script is returned as the result.
// Simple expressions
1 + 1
// Result: 2
dw.system.Site.current.ID
// Result: "RefArchGlobal"
❌ DON'T: Use return at the top level
// WRONG - causes compilation error
return 1 + 1
// Error: "invalid return"
❌ DON'T: Use var assignments expecting the variable
// WRONG - var declarations return null in debugger context
var result = {}; result.foo = 'bar';
// Error: Cannot set property "foo" of null
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 6d ago First seen · 382 lines · 25 tokens per session scan A 35abeac2653f
sfcc-script-evaluation is a skill published in the GitHub repository taurgis/sfcc-dev-mcp (27 stars, last pushed 6d ago), licensed MIT. It adds 25 tokens to every session and 2,444 once invoked, about $0.0001 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
nebula-logger-plugin-development
Use this skill when the user wants to build a new plugin that extends Nebula Logger - for example, custom trigger handlers on LogEntryEvente / Logc / LogEntryc, custom purge actions, or Slack-style outbound integrations. Covers the plugin framework interfaces, LoggerPluginmdt configuration, package layout, and testing…
seller-research
Use when researching a merchant, storefront, marketplace seller, or merchant of record for a buying decision, especially when identity, refund terms, fulfillment, counterfeit risk, domain history, or independent buyer outcomes are uncertain.
nebula-logger-install
Use this skill when the user wants to install and configure Nebula Logger in a Salesforce org for the first time. Covers package selection, installation paths, permissions, LoggerSettingsc hierarchy, and first-run troubleshooting.
nebula-logger-best-practices
Use this skill when the user wants to review, harden, or standardize Nebula Logger usage across a Salesforce team. Covers operational logging standards, environment-aware settings, limit-aware design, and governance guardrails.
scraperapi-price-monitoring
Use this skill whenever the user wants to check, track, or be alerted about product prices on Amazon, Walmart, or via Google Shopping. Trigger on: "monitor the price of this Amazon product", "did the price drop on [Walmart URL]?", "track these ASINs", "compare today's prices to last week", "alert me if [product] goes…
verify-product
Проверить подлинность товара по коду маркировки Честный ЗНАК.