Skip to content
Back to skills

416 Scoring Rubric 066feeb2

ASecurity

<!-- Parent: sf-integration/SKILL.md -->

  • 9 stars
  • 0 votes
  • 0 copies
  • 0 views
  • Added October 11, 2026
securitygoapisecuritydocumentation

Works with

  • api

Security analysis

A100/100

Pro scans all 2 files and shows the line behind each finding

Scanned October 11, 2026

npx -y skills add tools-only/X-Skills --skill 416-scoring-rubric_066feeb2 --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of 416 Scoring Rubric 066feeb2?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for 416 Scoring Rubric 066feeb2
[![Security: A โ€” Skills Directory](https://www.skillsdirectory.com/api/skills/tools-only-416-scoring-rubric-066feeb2/badge)](https://www.skillsdirectory.com/skills/tools-only-416-scoring-rubric-066feeb2)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
<!-- Parent: sf-integration/SKILL.md -->

# Scoring System (120 Points)

## Category Breakdown

| Category | Points | Evaluation Criteria |
|----------|--------|---------------------|
| **Security** | 30 | Named Credentials used (no hardcoded secrets), OAuth scopes minimized, certificate auth where applicable |
| **Error Handling** | 25 | Retry logic present, timeout handling (120s max), specific exception types, logging implemented |
| **Bulkification** | 20 | Batch callouts considered, CDC bulk handling, event batching for Platform Events |
| **Architecture** | 20 | Async patterns for DML-triggered callouts, proper service layer separation, single responsibility |
| **Best Practices** | 15 | Governor limit awareness, proper HTTP methods, idempotency for retries |
| **Documentation** | 10 | Clear intent documented, endpoint versioning noted, API contract documented |

## Scoring Thresholds

| Rating | Score Range | Description |
|--------|------------|-------------|
| Excellent | 108-120 | Production-ready, follows all best practices |
| Very Good | 90-107 | Minor improvements suggested |
| Good | 72-89 | Acceptable with noted improvements |
| Needs Work | 54-71 | Address issues before deployment |
| Block | <54 | CRITICAL issues, do not deploy |

## Scoring Output Format

```
๐Ÿ“Š INTEGRATION SCORE: XX/120 โญโญโญโญ Rating
โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•

๐Ÿ” Security           XX/30  โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–‘โ–‘ XX%
โ”œโ”€ Named Credentials used: โœ…
โ”œโ”€ No hardcoded secrets: โœ…
โ””โ”€ OAuth scopes minimal: โœ…

โš ๏ธ Error Handling     XX/25  โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–‘โ–‘ XX%
โ”œโ”€ Retry logic: โœ…
โ”œโ”€ Timeout handling: โœ…
โ””โ”€ Logging: โœ…

๐Ÿ“ฆ Bulkification      XX/20  โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–‘โ–‘ XX%
โ”œโ”€ Batch callouts: โœ…
โ””โ”€ Event batching: โœ…

๐Ÿ—๏ธ Architecture       XX/20  โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–‘โ–‘ XX%
โ”œโ”€ Async patterns: โœ…
โ””โ”€ Service separation: โœ…

โœ… Best Practices     XX/15  โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–‘โ–‘ XX%
โ”œโ”€ Governor limits: โœ…
โ””โ”€ Idempotency: โœ…

๐Ÿ“ Documentation      XX/10  โ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–ˆโ–‘โ–‘ XX%
โ”œโ”€ Clear intent: โœ…
โ””โ”€ API versioning: โœ…

โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•โ•
```

Files in this skill

  • README.md823 B
  • skill.md2.4 KB

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading commentsโ€ฆ

Newsletter

Get the weekly list of safe new skills, and the ones we pulled.