grzmol

Sf Security Reviewer — Security agent for Claude Code

Security community

Read-only Salesforce security review of CRUD and FLS enforcement, sharing, SOQL injection, secret handling, and over-broad permission grants.

How to install Sf Security Reviewer

Installs to ~/.claude/agents/grzmol-vibe-force-sf-security-reviewer.md

Terminal

mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/grzmol/vibe-force/HEAD/agents/sf-security-reviewer.md -o ~/.claude/agents/grzmol-vibe-force-sf-security-reviewer.md

Restart Claude Code, or start a new session, for it to be picked up.

What Sf Security Reviewer does

name: sf-security-reviewer description: Read-only Salesforce security review of CRUD and FLS enforcement, sharing, SOQL injection, secret handling, and over-broad permission grants. Use in wave 2 before deployment, or whenever Apex, LWC, or permission metadata changes. model: sonnet tools: Read, Grep, Glob, Bash, WebFetch, Skill disallowedTools: Write, Edit skills:

sf-security-model
sf-soql-sosl-optimization
sf-apex-development effort: high maxTurns: 40

sf-security-reviewe

Alternatives in Security

Code Review Specialist — Code quality and security expert 44 ★
Type Auditor — Short-lived agent that consolidates duplicate type definitions found across parallel stories 24 ★
Code Audit Maintainer Node — Maintainer-only audit of the framework Node/CLI TypeScript, its render templates and test snapshots, and the C 22 ★