Skip to main content

salesforce-security-basics

Applies Salesforce security best practices for Connected Apps and OAuth, ensuring secure API credential management and access control.

Install this skill

or
81/100

Security score

The salesforce-security-basics skill was audited on May 24, 2026 and we found 11 security issues across 3 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 148

Template literal with variable interpolation in command context

SourceSKILL.md
148console.log(`${entry.CreatedDate} | ${entry.CreatedBy?.Username} | ${entry.Action} | ${entry.Display}`);
low line 59

Access to .env file

SourceSKILL.md
59# .env (NEVER commit to git)
low line 68

Access to .env file

SourceSKILL.md
68.env
low line 69

Access to .env file

SourceSKILL.md
69.env.local
low line 70

Access to .env file

SourceSKILL.md
70.env.*.local
medium line 158

Access to .env file

SourceSKILL.md
158- [ ] `.env` and `*.key` files in `.gitignore`
low line 45

External URL reference

SourceSKILL.md
452. Callback URL: https://yourapp.com/oauth/callback (NOT localhost in prod)
low line 60

External URL reference

SourceSKILL.md
60SF_LOGIN_URL=https://login.salesforce.com
low line 176

External URL reference

SourceSKILL.md
176- [Connected Apps](https://help.salesforce.com/s/articleView?id=sf.connected_app_overview.htm)
low line 177

External URL reference

SourceSKILL.md
177- [Field-Level Security](https://help.salesforce.com/s/articleView?id=sf.admin_fls.htm)
low line 178

External URL reference

SourceSKILL.md
178- [Setup Audit Trail](https://help.salesforce.com/s/articleView?id=sf.admin_monitorsetup.htm)
Scanned on May 24, 2026
View Security Dashboard