salesforce-webhooks-events
Facilitates real-time integrations with Salesforce using Platform Events and Change Data Capture for efficient data handling.
Install this skill
or
65/100
Security score
The salesforce-webhooks-events skill was audited on May 23, 2026 and we found 11 security issues across 4 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
medium line 163
Template literal with variable interpolation in command context
SourceSKILL.md
| 163 | const eventKey = `sf:event:${replayId}`; |
medium line 167
Template literal with variable interpolation in command context
SourceSKILL.md
| 167 | console.log(`Event ${replayId} already processed, skipping`); |
medium line 194
Template literal with variable interpolation in command context
SourceSKILL.md
| 194 | console.error(`Failed to process event ${replayId}:`, error); |
medium line 2
Webhook reference - potential data exfiltration
SourceSKILL.md
| 2 | name: salesforce-webhooks-events |
medium line 26
Webhook reference - potential data exfiltration
SourceSKILL.md
| 26 | # Salesforce Webhooks & Events |
medium line 30
Webhook reference - potential data exfiltration
SourceSKILL.md
| 30 | Salesforce doesn't use traditional webhooks. Instead, it offers Platform Events, Change Data Capture (CDC), and Outbound Messages for real-time data flow. All use the CometD (Bayeux) streaming protoco |
low line 56
Access to .env file
SourceSKILL.md
| 56 | loginUrl: process.env.SF_LOGIN_URL, |
low line 58
Access to .env file
SourceSKILL.md
| 58 | await conn.login(process.env.SF_USERNAME!, process.env.SF_PASSWORD! + process.env.SF_SECURITY_TOKEN!); |
low line 159
Access to .env file
SourceSKILL.md
| 159 | const redis = new Redis(process.env.REDIS_URL); |
low line 142
External URL reference
SourceSKILL.md
| 142 | <soapenv:Envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/" |
low line 143
External URL reference
SourceSKILL.md
| 143 | xmlns:out="http://soap.sforce.com/2005/09/outbound"> |
Scanned on May 23, 2026
View Security DashboardGitHub Stars 2.4K
Rate this skill
Categorysales
UpdatedOctober 28, 2026
claudeclaude-codefrontenddesigndocxapisales-engineerbusiness-developmentcustomer-success-managersdrmarketing-analystsalesforcesalesmarketing
jeremylongshore/claude-code-plugins-plus-skills