armahajan24

Salesforce Security Reviewer — Security agent for Claude Code

Security community

Checks sharing declarations, CRUD/FLS enforcement, and scans for exposed secrets, hardcoded Ids, or non-synthetic data.

How to install Salesforce Security Reviewer

Installs to ~/.claude/agents/armahajan24-claude-salesforce-development-demo-salesforce-security-reviewer.md

Terminal
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/armahajan24/claude-salesforce-development-demo/HEAD/.claude/agents/salesforce-security-reviewer.md -o ~/.claude/agents/armahajan24-claude-salesforce-development-demo-salesforce-security-reviewer.md

Restart Claude Code, or start a new session, for it to be picked up.

What Salesforce Security Reviewer does

name: salesforce-security-reviewer description: Checks sharing declarations, CRUD/FLS enforcement, and scans for exposed secrets, hardcoded Ids, or non-synthetic data. Use before any merge, alongside the Code Reviewer. tools: Read, Grep, Glob, Bash

You are a Salesforce Security Reviewer. You do not modify files.

Check, with pass/fail and file:line for any failure:

  • Sharing keyword correctness (with sharing / without sharing / inherited sharing).
  • CRUD/FLS enforcement on DML an

Alternatives in Security

  • Token Auditor — Scans ui/src/ for hardcoded visual values, duplicate components, and shadcn replacement candidates; produces d 79.4k ★
  • Gitnexus Security Boundary Reviewer — GitNexus security and trust-boundary reviewer 45.8k ★
  • JS Analyzer — JavaScript static analysis agent for client-side security review 812 ★

Full documentation available on GitHub

View Source Repository

Related Agents

Sf Security Reviewer — Security agent for Claude Code

Sf Security Reviewer

Read-only Salesforce security review of CRUD and FLS enforcement, sharing, SOQL injection, secret handling, an

Security community
Cerberus — Security agent for Claude Code

Cerberus

Security specialist. Invoke before any deploy, when handling auth/credentials, when secrets might be exposed,

Security community
Tycon Plugin Security Basics — Security agent for Claude Code

Tycon Plugin Security Basics

Scan de seguridad sobre el diff (secretos hardcoded, inputs sin validar, injection, webhooks sin firma, cripto

Security community
Integration Checker — Security agent for Claude Code

Integration Checker

Runs post-merge integration tests and security scans. Ensures all merged code works together before holistic r

Security community
Sf Review Agent — Security agent for Claude Code

Sf Review Agent

Final Salesforce quality gate — validate Apex, LWC, Flow against architect plan; audit security, governor limi

Security community
Vuln Validator — Security agent for Claude Code

Vuln Validator

Independently tries to refute candidate vulnerabilities and records a reasoned verdict for each. Must be a dif

Security community

Related Skills

Security Sweep — Security skill for Claude Code

Security Sweep

Comprehensive security scanner covering OWASP Top 10 (2025), Mobile Top 10 (2024), and LLM Top 10 (2025). Scan

Security community
Skill Auditor Seguranca — Security skill for Claude Code

Skill Auditor Seguranca

Executable security and LGPD gate for AI-built projects. Scans for exposed secrets, .env leaks, Supabase servi

Security community
Verbose Activate — Development skill for Claude Code

Verbose Activate

Show a Genesis agent's APPLIED-EXPERTISE declarations in its replies (verbose ON). Off by default; enforcement

Development community