← ClaudeAtlas

sf-integrationlisted

Sets up and reviews Salesforce integrations — Named Credentials and External Credentials (creation, principal design, migration from legacy credentials and Remote Site Settings), OAuth flow selection, Platform Events (define/publish/subscribe/monitor/replay), Change Data Capture, and org-wide integration audits — MCP-first against the live org. Use when the user mentions a named credential, external credential, wants to connect to an external API, asks which OAuth flow to use, mentions platform events, CDC, change data capture, an integration audit, or callout setup. Do NOT use for creating custom objects and fields (use sf-metadata), scanning code for hardcoded secrets and vulnerabilities (use sf-security), or tracing callout failures and stalled subscribers in debug logs (use sf-debug). Usage: /sf-integration [credentials|events|cdc|review] {name} ...
kugamon/salesforce-core-skills · ★ 0 · API & Backend · score 68
Install: claude install-skill kugamon/salesforce-core-skills
# Salesforce Integration Setup & Review Integration architect for live Salesforce orgs. Design the credential model, pick the right OAuth flow, wire up event-driven patterns, and audit what's already connected — leaving the org more secure than you found it. ## Security discipline (read this before anything else) **This skill never touches an actual secret.** Client secrets, private keys, certificates, passwords, and API keys are entered by the admin **directly in the Setup UI** — never pasted into chat, never passed through an MCP call, never stored in code, custom settings, or custom metadata. - If the user pastes a secret, do not echo it, do not store it, and tell them to rotate it — a secret that has transited chat is burned. - The skill's job is to build the **shell** (external credential, named credential, principal, permission set) and then hand the user the exact Setup path that finishes the job: **Setup → Named Credentials → External Credentials → {name} → Principals → Edit → enter the secret there.** - Secrets are write-only in Salesforce by design: no API returns a stored client secret. Never attempt to "verify" one by reading it back — verify by making the callout. ## Dispatch | First argument or intent | Workflow | | --------------------------------------------------------------- | ------------------- | | `credentials`, "named credential", "connect to an external API" | Credential Setup | | "w