Skip to main content

salesforce-deploy-integration

Facilitates deployment of Salesforce-connected applications to Heroku, Vercel, and Cloud Run with secure credential management.

Install this skill

or
84/100

Security score

The salesforce-deploy-integration skill was audited on May 24, 2026 and we found 12 security issues across 3 threat categories. Review the findings below before installing.

Categories Tested

Security Issues

medium line 194

Webhook reference - potential data exfiltration

SourceSKILL.md
194For event handling, see `salesforce-webhooks-events`.
low line 92

Access to .env file

SourceSKILL.md
92loginUrl: process.env.SF_LOGIN_URL,
low line 98

Access to .env file

SourceSKILL.md
98client_id: process.env.SF_CLIENT_ID!,
low line 99

Access to .env file

SourceSKILL.md
99username: process.env.SF_USERNAME!,
low line 100

Access to .env file

SourceSKILL.md
100privateKey: process.env.SF_JWT_KEY!,
low line 144

Access to .env file

SourceSKILL.md
144const conn = new jsforce.Connection({ loginUrl: process.env.SF_LOGIN_URL });
low line 49

External URL reference

SourceSKILL.md
49heroku config:set SF_LOGIN_URL=https://login.salesforce.com
low line 133

External URL reference

SourceSKILL.md
133--set-env-vars SF_LOGIN_URL=https://login.salesforce.com \
low line 187

External URL reference

SourceSKILL.md
187- [Heroku Connect](https://devcenter.heroku.com/articles/heroku-connect)
low line 188

External URL reference

SourceSKILL.md
188- [Vercel Environment Variables](https://vercel.com/docs/environment-variables)
low line 189

External URL reference

SourceSKILL.md
189- [Cloud Run Secrets](https://cloud.google.com/run/docs/configuring/secrets)
low line 190

External URL reference

SourceSKILL.md
190- [JWT Bearer Flow](https://help.salesforce.com/s/articleView?id=sf.remoteaccess_oauth_jwt_flow.htm)
Scanned on May 24, 2026
View Security Dashboard
Installation guide →