Security guide
Skill divingsbysangam/salesforce-compound-engineering-plugin/skills/security-guide
Comprehensive Salesforce security best practices and implementation patternsFrom its SKILL.md
npx -y skills add divingsbysangam/salesforce-compound-engineering-plugin --skill security-guideAssembled from the repository path, not quoted from the project. Check it against their README if it does not work.
One thing to look at
- 10 stars10 stars. Stars are a popularity signal and not a quality one, but at this level it is likely that nobody has read this closely except its author, and you would be relying on your own review.
SKILL.md
1.4 KB, as published. Nobody here has run it
Salesforce Security Guide
SCOPE: UNIVERSAL - This skill applies to ALL Salesforce development requiring security considerations. READ this skill for Apex (CRUD/FLS), LWC (XSS), Integrations (OAuth), and AppExchange security reviews.
Complete reference for implementing security best practices in Salesforce development.
Required reads
Procedure lives in sibling files, not only in this orchestrator:
- CRUD/FLS Enforcement — read
references/crud-fls-enforcement.mdbefore acting on this section. - Sharing Model — read
references/sharing-model.mdbefore acting on this section. - SOQL Injection Prevention — read
references/soql-injection-prevention.mdbefore acting on this section. - XSS Prevention — read
references/xss-prevention.mdbefore acting on this section. - Sensitive Data Handling — read
references/sensitive-data-handling.mdbefore acting on this section. - Security Headers (Experience Cloud) — read
references/security-headers-experience-cloud.mdbefore acting on this section. - Hosted MCP Server Security — read
references/hosted-mcp-server-security.mdbefore acting on this section. - Security Checklist — read
references/security-checklist.mdbefore acting on this section.