skills.rest
iaesteman
iaestemanCOMMUNITY
Explore all skills by this author →
GitHub

sf-audit-security

Audit Salesforce security configurations and access controls via the Salesforce CLI.

3|1|Updated Mar 10, 2026
Search Tags:#security#audit#salesforce#mfa#profiles#permission-sets#login-activity
One-click install
npx skills add https://github.com/iaesteman/ai-salesforce-audit-claude --skill sf-audit-security
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: sf-audit-security
Source: https://github.com/iaesteman/ai-salesforce-audit-claude/tree/main/skills/sf-audit-security
Command: npx skills add https://github.com/iaesteman/ai-salesforce-audit-claude --skill sf-audit-security

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Salesforce orgs often have misconfigurations in security and access controls that expose data and increase risk. This skill provides a repeatable, end-to-end audit of users, profiles, permission sets, MFA, IP restrictions, and field-level security to surface risks and produce a consumable report.

Core Features & Use Cases

  • Audits user profiles, permission sets, object-wide defaults (OWD), MFA enforcement, IP restrictions, login activity, and field-level security.
  • Generates a comprehensive SF-SECURITY.md report and an accompanying SF-SECURITY-REPORT when needed for stakeholders.
  • Use Case: Run a full org security audit before a security review or post-incident to verify that critical controls are in place.

Quick Start

To begin, run the security audit for your org with /sf-audit-security [org-alias].

Frequently Asked Questions about sf-audit-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit Salesforce security configurations for profiles and permission sets?▼

You can audit Salesforce security by running predefined queries against a live org to evaluate profiles, permission sets, OWD settings, and field-level security. The audit generates a structured SF-SECURITY.md report containing risk scores and specific findings.

Can I check MFA enforcement and IP restrictions across my Salesforce org?▼

Yes, you can check MFA enforcement and IP restrictions across a live Salesforce org. The audit queries these specific access controls alongside login activity to surface security risks and document them in a structured report.

What is the best way to generate a security audit report for a Salesforce org?▼

The best way to generate a security audit report is using an automated CLI tool that evaluates access controls and outputs a structured SF-SECURITY.md file. It provides repeatable scoring and findings for stakeholders without manual analysis.

Do I need the Salesforce CLI to run a permission set and OWD access audit?▼

Yes, you need the Salesforce CLI installed and authenticated to run this access audit. The Skill relies on the CLI to execute predefined queries against a live org and retrieve security configurations for the report.

When should I run a Salesforce security and access audit?▼

You should run a Salesforce security audit before a formal security review or post-incident to verify critical controls are in place. It surfaces misconfigurations in user access, profiles, and MFA to reduce data exposure risk.

Related Skills

Explore More Data & Analytics Skills→
bhanu91221bhanu91221
2

permission-model

Design Salesforce permission models governing users, records, and Apex sharing.

Community
Advanced
marquesfelipmarquesfelip

brute-force-protection

Enforce rate limits, lockouts, and MFA on authentication endpoints.

Community
Advanced
dmckeeSFdmckeeSF

generating-permission-set

Generates Salesforce PermissionSet XML metadata for objects, fields, users, and apps.

Community
Intermediate
takusaotometakusaotome
5

salesforce-cli-expert

Generate Salesforce CLI commands for authentication, SOQL queries, metadata retrieval, and deployments.

Community
Intermediate