salla-embedded-app
Pass
Audited by Gen Agent Trust Hub on Jul 8, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill promotes secure development practices by mandating the "Trust-but-Verify" model, where short-lived tokens are verified on the backend via Salla's official Introspection API before granting session access.
- [EXTERNAL_DOWNLOADS]: All external references, including the
@salla.sa/embedded-sdkNPM package, the UNPKG CDN links, and the GitHub playground repository, belong to the official SallaApp vendor or established package registries. - [DATA_EXFILTRATION]: Analysis of the network patterns confirms that the described data flows (sending tokens to the app's own backend and the backend's communication with
api.salla.dev) are strictly for authentication and legitimate application functionality. - [COMMAND_EXECUTION]: Code examples provided are for developer implementation and do not include any hidden or dangerous shell commands. Package installation instructions use standard
npmcommands for the vendor's library.
Audit Metadata