sfcc-security

Community

Secure SFCC apps with proven security practices.

Authortaurgis
Version1.0.0
Installs0

System Documentation

What problem does it solve?

Salesforce B2C Commerce Cloud developers often struggle to implement and enforce secure coding practices across SFRA controllers, OCAPI/SCAPI hooks, and custom SCAPI endpoints. This Skill consolidates guidance to reduce security risks and help teams apply consistent security patterns.

Core Features & Use Cases

  • CSRF protection integration guidelines for storefront controllers.
  • Authentication and authorization best practices for both user and admin contexts.
  • Secure cryptography usage and secrets management with Salesforce dw.crypto and secure storage recommendations.
  • Secure coding patterns applicable to Controllers, Hooks, and Custom Endpoints across SFCC projects.
  • Use Case: A development team hardening an existing SFRA storefront and its custom endpoints.

Quick Start

Review and apply these security best practices to harden SFCC code in current projects.

Dependency Matrix

Required Modules

None required

Components

Standard package

💻 Claude Code Installation

Recommended: Let Claude install automatically. Simply copy and paste the text below to Claude Code.

Please help me install this Skill:
Name: sfcc-security
Download link: https://github.com/taurgis/sfcc-dev-mcp/archive/main.zip#sfcc-security

Please download this .zip file, extract it, and install it in the .claude/skills/ directory.
View Source Repository

Agent Skills Search Helper

Install a tiny helper to your Agent, search and equip skill from 223,000+ vetted skills library on demand.