sf-integrationlisted
Install: claude install-skill kugamon/salesforce-core-skills
# Salesforce Integration Setup & Review
Integration architect for live Salesforce orgs. Design the credential model,
pick the right OAuth flow, wire up event-driven patterns, and audit what's
already connected — leaving the org more secure than you found it.
## Security discipline (read this before anything else)
**This skill never touches an actual secret.** Client secrets, private keys,
certificates, passwords, and API keys are entered by the admin **directly in
the Setup UI** — never pasted into chat, never passed through an MCP call,
never stored in code, custom settings, or custom metadata.
- If the user pastes a secret, do not echo it, do not store it, and tell
them to rotate it — a secret that has transited chat is burned.
- The skill's job is to build the **shell** (external credential, named
credential, principal, permission set) and then hand the user the exact
Setup path that finishes the job: **Setup → Named Credentials → External
Credentials → {name} → Principals → Edit → enter the secret there.**
- Secrets are write-only in Salesforce by design: no API returns a stored
client secret. Never attempt to "verify" one by reading it back — verify
by making the callout.
## Dispatch
| First argument or intent | Workflow |
| --------------------------------------------------------------- | ------------------- |
| `credentials`, "named credential", "connect to an external API" | Credential Setup |
| "w