salesforce-developer

An agent skill by Jeffallan, from Jeffallan/claude-skills. Tags: api, automation, cloud, devops, web.

What it does

Writes and debugs Apex code, builds Lightning Web Components, optimizes SOQL queries, implements triggers, batch jobs, platform events, and integrations on the Salesforce platform. Use when developing Salesforce applications, customizing CRM workflows, managing governor limits, bulk processing, or setting up Salesforce DX and CI/CD pipelines.

Install

With the skills CLI, which installs into Claude Code, Codex, Cursor and other agents:

npx skills add Jeffallan/claude-skills --skill salesforce-developer

Or copy the skill folder into Claude Code's skills directory by hand (~/.claude/skills for every project, or .claude/skills inside one):

git clone --depth 1 https://github.com/Jeffallan/claude-skills
cp -r claude-skills/skills/salesforce-developer ~/.claude/skills/salesforce-developer

Safety box score

Grade D, elevated risk: 53 of 100 risk points, rated 2026-09-24. The grade rates what the skill and its scripts can reach on the machine of whoever installs it, across eight categories from shell execution to secrets access. How the score works.

This skill is a Salesforce development and deployment playbook. It can create and deploy metadata, run Apex/CLI scripts, call external APIs, and export/import data, so the main risks are production changes, secret handling, and runtime downloads.

Category levels, from 0 (none) to 3 (high)
Category	Level	Why
Code & shell execution	2 (moderate)	The files include runnable bash/CLI and Apex examples such as `#!/bin/bash`, `sf project deploy start`, and `sf apex run`, so using the skill means executing commands and code.
Network access	2 (moderate)	It makes outbound calls for CI/CD and integrations, including `wget $SFDX_CLI_URL` and REST/cometd callouts to Salesforce and external systems.
Filesystem reach	1 (low)	Local writes are confined to the project tree, e.g. `auth.txt`, `data/`, and `test-results/`, rather than system paths.
Secrets & credentials	2 (moderate)	The examples handle auth material such as `echo "${{ secrets.PROD_AUTH_URL }}" > auth.txt`, `--jwt-key-file server.key`, and `UserInfo.getSessionId()`.
Privilege & persistence	0 (none)	No sudo, global installs, services, shell startup edits, or other OS-level privilege changes appear in the files.
Instruction hijack surface	2 (moderate)	Dynamic query examples concatenate raw strings into SOQL, including `whereClause`, `orderBy`, and `Database.query(query)`, which creates injection risk if inputs are untrusted.
Irreversible actions	3 (high)	The deployment workflow can validate, deploy, and quick-deploy to production and run post-deployment data migration/masking, e.g. `sf project deploy quick --job-id $JOB_ID --target-org prod` and `sf apex run --file scripts/apex/data-migration.apex`.
Transparency	1 (low)	The actual Salesforce CLI is fetched at runtime (`wget $SFDX_CLI_URL` / `salesforce/cli:${SF_CLI_VERSION}-full`), so the executable is not fully inspectable in the skill package.

Before installing

Read `references/deployment-devops.md` first; it contains production deploy, quick-deploy, and post-deploy migration steps.
Check every `secrets.*_AUTH_URL`, JWT key, and session-token path before letting the agent run it.
Run the deployment scripts against a scratch org only, and inspect any generated `auth.txt`, `data/`, or `test-results/` files.
Review `references/soql-sosl.md` for any user-controlled values flowing into `Database.query(...)` or dynamic SOQL builders.

Rated 2026-09-24 by an automated review of 6 files from the skill's repository.

Source

Repository: Jeffallan/claude-skills (all skills from this repository)
Path: skills/salesforce-developer/SKILL.md
Branch: main
Updated: 2026-09-19

agents-deploy — Use when deploying your agent to AWS, or when a deploy has failed.
aws-blocks — Guides building full-stack applications with AWS Blocks — an Infrastructure-from-Code framework.
devcontainer-setup — Creates devcontainers with Claude Code, language-specific tooling (Python/Node/Rust/Go), and persistent volumes.
gh-cli — Enforces authenticated gh CLI workflows over unauthenticated curl, WebFetch, and MCP fetch patterns.
running-release-tests — Run automated release testing (UI or API) via the AWS DevOps Agent using a pre-configured test profile.
cloud-architect — Designs cloud architectures, creates migration plans, generates cost optimization recommendations, and produces disaster recovery strategies across AWS, Azure.