salesforce-development
Provides expert patterns for Salesforce development, including LWC, Apex, and REST APIs for optimized performance and best practices.
Install this skill
Security score
The salesforce-development skill was audited on May 13, 2026 and we found 23 security issues across 3 threat categories, including 19 high-severity. Review the findings below before installing.
Categories Tested
Security Issues
Template literal with variable interpolation in command context
| 373 | const response = await fetch(`${this.loginUrl}/services/oauth2/token`, { |
Template literal with variable interpolation in command context
| 384 | throw new Error(`Auth failed: ${error.error_description}`); |
Template literal with variable interpolation in command context
| 397 | `${this.instanceUrl}/services/data/v59.0/query?q=${encodeURIComponent(soql)}`, |
Template literal with variable interpolation in command context
| 400 | 'Authorization': `Bearer ${this.accessToken}`, |
Template literal with variable interpolation in command context
| 417 | `${this.instanceUrl}/services/data/v59.0/sobjects/${sobject}`, |
Template literal with variable interpolation in command context
| 421 | 'Authorization': `Bearer ${this.accessToken}`, |
Template literal with variable interpolation in command context
| 444 | throw new Error(`API Error: ${JSON.stringify(error)}`); |
Template literal with variable interpolation in command context
| 499 | `${this.instanceUrl}/services/data/v59.0/jobs/ingest`, |
Template literal with variable interpolation in command context
| 503 | 'Authorization': `Bearer ${this.accessToken}`, |
Template literal with variable interpolation in command context
| 523 | `${this.instanceUrl}/services/data/v59.0/jobs/ingest/${jobId}/batches`, |
Template literal with variable interpolation in command context
| 527 | 'Authorization': `Bearer ${this.accessToken}`, |
Template literal with variable interpolation in command context
| 537 | `${this.instanceUrl}/services/data/v59.0/jobs/ingest/${jobId}`, |
Template literal with variable interpolation in command context
| 541 | 'Authorization': `Bearer ${this.accessToken}`, |
Template literal with variable interpolation in command context
| 556 | `${this.instanceUrl}/services/data/v59.0/jobs/ingest/${jobId}`, |
Template literal with variable interpolation in command context
| 558 | headers: { 'Authorization': `Bearer ${this.accessToken}` } |
Template literal with variable interpolation in command context
| 576 | throw new Error(`Bulk job failed: ${job.state}`); |
Template literal with variable interpolation in command context
| 587 | `${this.instanceUrl}/services/data/v59.0/jobs/ingest/${jobId}/failedResults`, |
Template literal with variable interpolation in command context
| 589 | headers: { 'Authorization': `Bearer ${this.accessToken}` } |
Template literal with variable interpolation in command context
| 612 | return `"${str.replace(/"/g, '""')}"`; |
Access to .env file
| 450 | process.env.SF_CLIENT_ID!, |
Access to .env file
| 451 | process.env.SF_USERNAME!, |
External URL reference
| 351 | private loginUrl: string = 'https://login.salesforce.com' |
External URL reference
| 667 | "sfdcLoginUrl": "https://login.salesforce.com", |