dx-code-analyzer-run

Automate Salesforce code analysis with multiple scanning engines.

Updated Jul 2, 2026
One-click install
npx skills add https://github.com/padjei/SF_Agents --skill dx-code-analyzer-run-padjei
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: dx-code-analyzer-run
Source: https://github.com/padjei/SF_Agents/tree/main/.claude/skills/dx-code-analyzer-run
Command: npx skills add https://github.com/padjei/SF_Agents --skill dx-code-analyzer-run-padjei

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires @salesforce/cli, @salesforce/plugin-code-analyzer, pmd, eslint, cpd, retire-js, flow, sfge, apexguru, java, node, python, and includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

This Skill automates the process of scanning Salesforce code for security vulnerabilities, performance bottlenecks, and adherence to best practices, significantly reducing manual effort and time.

Core Features & Use Cases

  • Automated Code Analysis: Scan Salesforce code using multiple engines like PMD, ESLint, CPD, RetireJS, Flow, SFGE, ApexGuru.
  • Target Scanning: Scan specific files, folders, or git diffs.
  • Result Exploration: Filter and explore scan results by engine, severity, category, and file.
  • Post-Scan Actions: Apply auto-fixes provided by the engines and summarize changes.
  • Use Case: If you want to analyze a particular file for security issues and performance bottlenecks, use the dx-code-analyzer-run skill to scan it and then explore the results.

Quick Start

Use the dx-code-analyzer-run skill to scan the 'force-app/main/default/classes' directory for security issues.

Frequently Asked Questions about dx-code-analyzer-run

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate Salesforce code analysis for security vulnerabilities and performance bottlenecks?

Salesforce code analysis can be automated by scanning code using multiple engines like PMD, ESLint, CPD, RetireJS, Flow, SFGE, and ApexGuru to detect security vulnerabilities, performance bottlenecks, and best practice violations. This automates scanning and reduces manual effort.

What do I need to run Salesforce static analysis on my Apex classes?

To run Salesforce static analysis on Apex classes, you need Salesforce CLI, @salesforce/plugin-code-analyzer, and runtime dependencies like Java, Node, and Python installed. These tools support the various code analysis engines required for scanning.

Can I scan specific files or git diffs instead of the entire Salesforce project?

Yes, you can scan specific files, folders, or git diffs. Target scanning allows you to focus the code analysis on particular areas of your Salesforce application rather than running a full project scan.

How do I filter code analysis results by severity and engine?

Code analysis results can be filtered and explored by engine, severity, category, and file. This allows you to quickly triage security issues and performance bottlenecks identified during the Salesforce code scan.

Does Salesforce code analysis support applying auto-fixes after a scan?

Yes, Salesforce code analysis supports post-scan actions. You can apply auto-fixes provided by the analysis engines and then summarize the changes made to resolve detected code quality and security issues.