What problem does it solve? Salesforce teams need consistent, automated code quality checks across Apex and Lightning Web Components, but manually configuring and running multiple analysis engines (PMD, ESLint, RetireJS, CPD) is error-prone and time-consuming. This Skill standardizes static analysis so violations are caught before code review, PR merge, or release. ## Core Features & Use Cases - Multi-engine analysis: Run PMD rules for Apex, ESLint for LWC, RetireJS for vulnerable JavaScript libraries, and CPD for duplicate code detection with configurable rule selectors. - Severity gating: Set severity thresholds so CI pipelines fail only on HIGH or MEDIUM violations, with clear exit codes for automation. - Flexible reporting: Generate table, JSON, CSV, or HTML reports for terminal review, programmatic processing, or stakeholder sharing. - Use Case: Before merging a pull request, run a full project scan with security and performance rule selectors, then report the violation count by severity, top offending files, and critical findings like SOQL injection or missing CRUD/FLS checks. ## Quick Start Ask the assistant to run a full static code analysis on the force-app directory with security and recommended rules and report the violations by severity.
