Dx Code Analyzer Run
Run Salesforce Code Analyzer to scan code for security, performance, best practice, and code style violations. Supports all engines (PMD, ESLint, CPD, RetireJS, Flow, SFGE, ApexGuru), targets (files, folders, git diff), categories, and severities. Also handles post-scan exploration: filtering results by engine/sever...
概览
Dx Code Analyzer Run is a SKILL.md workflow from forcedotcom/sf-skills. It is categorized under security and links back to its reviewed source so users can inspect the complete instructions and bundled resources before installation.
使用场景
安装说明
# Review source first
open https://github.com/forcedotcom/sf-skills/blob/main/skills/dx-code-analyzer-run/SKILL.mdCopy the reviewed skill folder into the skills directory used by your compatible agent.
安全提示
AIToolly validated the published source structure and license automatically. Review forcedotcom/sf-skills and any bundled scripts again before granting workspace, command, or network access.
相关 Skills
Cargo Fuzz
trailofbits/skills
cargo-fuzz 是使用 Cargo 的 Rust 项目的事实标准模糊测试工具。用于通过 libFuzzer 后端对 Rust 代码进行模糊测试。
Yara Rule Authoring
trailofbits/skills
指导编写用于恶意软件识别的高质量 YARA-X 检测规则。适用于编写、审查或优化 YARA 规则。涵盖命名规范、字符串选择、性能优化、从旧版 YARA 迁移以及减少误报。触发条件：YARA、YARA-X、恶意软件检测、威胁狩猎、IOC、签名、crx 模块、dex 模块。
Security Audit
TerminalSkills/skills
通过扫描 OWASP Top 10 漏洞、检查依赖项中的已知 CVE、检测泄露的机密和 API 密钥，并生成优先修复建议，对代码库进行全面的安全审计。此技能结合了静态分析模式与依赖项审计工具。