salesforce-known-pitfalls
Helps identify and avoid common Salesforce integration pitfalls, improving code quality and efficiency in Salesforce projects.
Install this skill
Security score
The salesforce-known-pitfalls skill was audited on May 26, 2026 and we found 10 security issues across 3 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
Template literal with variable interpolation in command context
| 41 | `SELECT Id, Name, Email FROM Contact WHERE AccountId = '${account.Id}'` |
Template literal with variable interpolation in command context
| 97 | await conn.query(`SELECT Id FROM Account WHERE Name = '${name}'`); |
Template literal with variable interpolation in command context
| 106 | await conn.query(`SELECT Id FROM Account WHERE Name = '${escapeSoql(name)}'`); |
Template literal with variable interpolation in command context
| 168 | console.error(`${failures.length}/${results.length} records failed:`); |
Template literal with variable interpolation in command context
| 170 | console.error(` ${failure.errors.map(e => `${e.statusCode}: ${e.message}`).join('; ')}`); |
Template literal with variable interpolation in command context
| 261 | const changes = await conn.query(` |
Access to .env file
| 192 | loginUrl: process.env.SF_LOGIN_URL, // 'https://login.salesforce.com' for prod |
External URL reference
| 184 | loginUrl: 'https://test.salesforce.com', // WRONG for production |
External URL reference
| 192 | loginUrl: process.env.SF_LOGIN_URL, // 'https://login.salesforce.com' for prod |
External URL reference
| 193 | // OR: 'https://test.salesforce.com' for sandboxes |