Salesforce Core Skills
Description
Fifteen behaviorally-tested Salesforce skills for AI agents — Apex, Flow, SOQL, LWC, Metadata, Permissions, Diagrams, Org Audit, Tests, Security, Debug, Org Diff, Integrations, Campaigns, Leads. MCP-first, works with any Salesforce MCP server. Claude plugin marketplace + npx install. Try it with bundled sample data.
Installation
This entry records only its repository, not the path inside it, so there is no
exact command to give. Open the source below and copy the folder into
~/.claude/skills/, or the file into ~/.claude/agents/.
README
salesforce-core-skills
[](https://github.com/kugamon/salesforce-core-skills/actions/workflows/validate.yml) [](LICENSE)
A Claude Desktop / Cowork **plugin marketplace** that ships a single plugin (`salesforce-core`) with **fifteen general-purpose Salesforce admin & developer skills** — Apex, Flow, SOQL/Data, LWC, Metadata, Permissions, Architecture Diagrams, Org Audit, Test Generation, Security Review, Debug Log Analysis, Org Comparison, Integrations, Campaign Analytics, and Lead Enrichment.
This repo **does not install an MCP server**. It assumes you already have a Salesforce MCP server connected to your org. The skills are **tool-agnostic** — they reference MCP capabilities generically rather than one vendor's tool names, so they work with any Salesforce MCP server.
Every skill is **behaviorally tested against a live Salesforce org** — 13 independent agent runs per iteration covering reads, writes (with verified cleanup), and analysis. [Iteration 2](evals/results/iteration-2/eval-report.md) (v1.4.x skills): 33/39 expectations passed, 0 failed, 12 of 13 runs improved over [iteration 1](evals/results/iteration-1/eval-report.md), and all 8 fixes shipped after iteration 1 verified working.
Why this plugin
Out of the box, Claude can call your Salesforce MCP server's tools — but it doesn't know:
- How to write production-grade Apex (bulkification, governor limits, SOLID, trigger frameworks) or score it consistently
- How to build Flows that pass review (naming, fault paths, entry conditions, subflow patterns)
- How to optimize SOQL (selectivity, indexes) or run safe bulk DML with cleanup/rollback plans
- How to audit an org end-to-end and produce Word / Excel / HTML reports
- How to write tests that catch regressions (assertion quality, 200-record bulk proofs, runAs enfo
Related Skills
Fastapi Review
Review a FastAPI application for architecture, async correctness, dependency injection, Pydantic schemas, secu
Security Defense in Depth
Implement multi-layered testing and security best practices.
Security SecLists Official Repository
[OWASP Testing Guide](https://owasp.org/www-project-web-security-testing-guide/)
Security Threat Hunting with Sigma Rules
Use Sigma detection rules to hunt for threats and analyze security events
Security Maintenance Walkthrough - 2026-03-29
- Re-triaged the full 2026-03-15 security finding set against current `main` and wrote a fresh current-head re
Security Google Workspace Model Armor
Filter user-generated content for safety
Security Related Agents
Django Reviewer
Expert Django code reviewer specializing in ORM correctness, DRF patterns, migration safety, security misconfi
Token Auditor
Scans ui/src/ for hardcoded visual values, duplicate components, and shadcn replacement candidates; produces d
Gitnexus Security Boundary Reviewer
GitNexus security and trust-boundary reviewer. Use for auth, permissions, secrets, injection, unsafe parsing,