All categories
Security
Security audits, vulnerabilities, compliance, auth, secrets, and safe automation
- 31,845
- 1,327
Security grades appear on each card once the skill has been scanned. Newly imported skills may briefly show without a grade until the backfill job runs.
Open in full browserBrowse security skills
Showing 17,233–17,256 of 31,845 skills
- Soql SecurityUse when writing, reviewing, or troubleshooting Apex queries that may expose SOQL injection or CRUD/FLS issues. Triggers: 'Database.query', 'WITH USER_MODE', 'WITH SECURITY_ENFORCED', 'stripInaccessible', 'security review finding'. NOT for record-sharing design unless the main issue is Apex query security.Votes: 0GitHub stars: 3
- Mcae Pardot ApiUse this skill when integrating with the Account Engagement (Pardot) REST API v5 to create, read, update, or query Prospects, Visitors, Visitor Activities, or Form Handlers programmatically. Trigger keywords: Pardot API, Account Engagement API, prospect sync, visitor tracking API, form handler integration, MCAE REST API. NOT for Marketing Cloud API (Email Studio, Journey Builder REST), NOT for standard Salesforce CRM REST API, NOT for MCAE setup or business unit provisioning.Votes: 0GitHub stars: 3
- Marketing Cloud ApiUse this skill when integrating Salesforce or external systems with Marketing Cloud Engagement REST or SOAP APIs — including OAuth 2.0 authentication, journey injection via /interaction/v1/events, triggered sends, and Data Extension row operations. Trigger keywords: MC API, Marketing Cloud REST, journey injection, triggered send, fire entry event, DE row upsert, dataeventsasync, Installed Package API integration. NOT for Salesforce core REST/SOAP APIs, MCAE/Pardot APIs, or Marketing Cloud Con...Votes: 0GitHub stars: 3
- Dynamic ApexUse when building or reviewing code that constructs SOQL/SOSL at runtime, inspects schema metadata via Schema.describe methods, accesses fields dynamically on sObjects, or performs runtime type inspection. Triggers: 'Database.query', 'Schema.getGlobalDescribe', 'Schema.describeSObjects', 'dynamic field access', 'SObjectType', 'DescribeFieldResult'. NOT for static SOQL queries or query performance tuning — use soql-fundamentals or soql-query-optimization.Votes: 0GitHub stars: 3
- Commerce Payment IntegrationUse this skill when building or debugging a custom Salesforce Commerce payment gateway adapter using the CommercePayments Apex namespace — covering adapter implementation, RequestType handling, PCI tokenization patterns, and integration path selection. NOT for billing (Salesforce Billing / blng namespace), NOT for configuring the legacy sfdc_checkout.CartPaymentAuthorize interface (see admin/commerce-checkout-configuration), and NOT for storefront UI payment form design.Votes: 0GitHub stars: 3
- Apex Security PatternsUse when designing, reviewing, or debugging Apex execution context, sharing keywords, CRUD/FLS enforcement, system-vs-user mode behavior, or secure write patterns. Triggers: 'with sharing', 'inherited sharing', 'stripInaccessible', 'AuraEnabled security', 'CRUD FLS'. NOT for SOQL injection review alone — use apex/soql-security for query-specific hardening.Votes: 0GitHub stars: 3
- Prompt Injection DefenseRed-team an Agentforce agent against prompt-injection and jailbreak attacks; codify test cases and guardrails. NOT for general application-security reviews outside the agent boundary.Votes: 0GitHub stars: 3
- User ManagementUse this skill to create, deactivate, freeze, or manage Salesforce users, assign user licenses and feature licenses, configure profiles and roles, set login hours and IP restrictions, and set up delegated administration. Triggers: adding a new user, deactivating a departing employee, license assignment, freezing a user account, delegated admin setup. NOT for permission sets (use permission-set-architecture) or sharing model design (use sharing-and-visibility).Votes: 0GitHub stars: 3
- Org Setup And ConfigurationUse when configuring org-wide platform settings: MFA enforcement, My Domain setup and deployment, session timeout and security settings, password policies, trusted IP ranges (Network Access), and CSP Trusted Sites. Trigger keywords: 'MFA setup', 'My Domain', 'session settings', 'password policy', 'trusted IP ranges', 'CSP trusted sites'. NOT for user-level login restrictions (use user-management), NOT for permission model design (use permission-sets-vs-profiles), NOT for security audit and ha...Votes: 0GitHub stars: 3
- Integration User ManagementUse when setting up or auditing dedicated Salesforce integration users — including the Salesforce Integration user license, API-only profile, permission set layering, MFA waiver configuration, and login monitoring. NOT for standard user management.Votes: 0GitHub stars: 3
- Integration Admin Connected AppsUse when managing Connected Apps for integration purposes — configuring OAuth policies, IP restrictions, refresh token expiry, and monitoring connected app usage. NOT for OAuth flows implementation (use oauth-flows-and-connected-apps).Votes: 0GitHub stars: 3
- Connected Apps And AuthUse when designing, reviewing, or troubleshooting Salesforce connected apps, Named Credentials, External Credentials, and OAuth-based integration access. Triggers: 'connected app', 'OAuth flow', 'client credentials', 'JWT bearer', 'Named Credential', 'External Credential', 'integration user', 'IP restrictions'. NOT for business-user sharing or field permissions unless the auth design depends on them.Votes: 0GitHub stars: 3
- Contribute Workbench ImageUse when an external contributor or maintainer adds or changes an NPA workbench image and must carry it through licensing review, trusted public-dev build, real validation, and digest-identical GHCR release promotion.Votes: 0GitHub stars: 105
- Health PreflightUse before any deploy, image build, provisioning, or GPU submit to prove service credentials with `npa workbench health preflight`, request `--checks nebius` before provisioning, and verify gated-model access with `npa workbench health access`.Votes: 0GitHub stars: 105
- Wg Code SentinelAsk WG Code Sentinel to review your code for security issues. Use when applying Project Glasswing code sentinel security patterns.Votes: 0GitHub stars: 13
- Token Administration Console ValidatorRFC compliance validator for Token Administration Console implementations - OAuth 2.0, Bearer Token, Token Introspection. Use when you need help with token administration console validator.Votes: 0GitHub stars: 13
- Security TestingExpert in security testing methodologies and penetration testing. Use when writing, running, or improving tests with security testing.Votes: 0GitHub stars: 13
- Security ReviewUse this skill when adding authentication, handling user input, working with secrets, creating API endpoints, or implementing payment/sensitive features. Provides comprehensive security checklist and patterns.Votes: 0GitHub stars: 13
- Secret Management ExpertExpert in secret management with HashiCorp Vault, AWS Secrets Manager, and secure secrets handling. Use when performing security analysis, auditing, or hardening with secret management.Votes: 0GitHub stars: 13
- Sast Dast ExpertExpert in Static and Dynamic Application Security Testing. Use when performing security analysis, auditing, or hardening with sast dast.Votes: 0GitHub stars: 13
- Saas MultitenancyExpert in designing multi-tenant SaaS architectures with isolation, scalability, and enterprise features. Use when designing system architecture or making technical decisions about saas multitenancy.Votes: 0GitHub stars: 13
- Rfc Multitenancy ArchitectureComprehensive multi-tenancy architecture guide using RFC standards for identity, authorization, and provisioning. Use when implementing or validating rfc multitenancy architecture protocol compliance.Votes: 0GitHub stars: 13
- Rfc Compliance AgentAutonomous agent that searches RFC standards online and refactors codebases for compliance. Use when implementing or validating rfc compliance agent protocol compliance.Votes: 0GitHub stars: 13
- Rfc 8705 MtlsCertificate-based client authentication and token binding for high-security OAuth 2.0. Use when implementing or validating rfc 8705 mtls protocol compliance.Votes: 0GitHub stars: 13