b2c-slas-auth-patterns
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides comprehensive guides for implementing SLAS authentication patterns, including passwordless login (OTP, SMS, Passkeys), session bridging between PWA Kit and SFRA, and Trusted System on Behalf of (TSOB) flows.
- [SAFE]: All code examples use industry-standard libraries such as
josefor JWT validation andtwiliofor SMS messaging, following established security protocols like OIDC and WebAuthn. - [SAFE]: Network operations are directed to official vendor-owned domains (
*.api.commercecloud.salesforce.com) or represent placeholders for user-implemented callback endpoints. - [SAFE]: The skill explicitly emphasizes security best practices, including the use of HTTPS, server-side validation, secure storage for tokens (e.g., httpOnly cookies), and the protection of client secrets.
- [SAFE]: No malicious patterns, obfuscation techniques, persistence mechanisms, or unauthorized privilege escalation attempts were detected in the instructions or reference files.
Audit Metadata