sfdc-connect

Extract security configuration data from Salesforce orgs via REST and Metadata API.

Updated Aug 27, 2026
One-click install
npx skills add https://github.com/dfirs1car1o/saas-posture --skill sfdc-connect
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: sfdc-connect
Source: https://github.com/dfirs1car1o/saas-posture/tree/main/skills/sfdc-connect
Command: npx skills add https://github.com/dfirs1car1o/saas-posture --skill sfdc-connect

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill automates the extraction of critical security configuration data from Salesforce orgs, enabling comprehensive assessments against compliance frameworks.

Core Features & Use Cases

  • Security Data Collection: Gathers configuration details related to authentication, access control, event monitoring, and more.
  • Compliance Readiness: Provides raw data needed for OSCAL, SSCF, and other security assessments.
  • Use Case: Automatically collect all identity and access management settings from a Salesforce production org to prepare for a SOC2 audit.

Quick Start

Use the sfdc-connect skill to collect authentication and access settings from your production Salesforce org.

Frequently Asked Questions about sfdc-connect

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I extract security configuration data from a Salesforce org for compliance assessments?

Salesforce security data extraction automates gathering authentication, access control, and event monitoring configurations via REST and Metadata APIs, outputting JSON formatted for compliance assessments.

What is the best way to collect Salesforce access and authentication settings for an OSCAL assessment?

Collecting Salesforce access settings for OSCAL assessments requires extracting security configurations like authentication and access control data via REST and Metadata APIs into a structured JSON collector finding shape.

Can I extract Salesforce org security configurations in read-only mode without modifying my production environment?

Yes, Salesforce security data extraction operates in a read-only mode, ensuring your production org configurations remain unmodified while gathering compliance data via REST and Metadata APIs.

How do I authenticate to Salesforce orgs to gather security configuration data for SOC2 audits?

Authenticating to Salesforce orgs for SOC2 security data collection requires passing credentials via environment variables, allowing the extraction tool to securely access and gather compliance configurations.

What security scopes and configuration data can I extract from Salesforce for SSCF compliance readiness?

Salesforce SSCF compliance readiness data extraction supports multiple scopes including authentication, access control, event monitoring, and integrations, producing JSON output conforming to a collector finding shape.

Does the Salesforce data extraction tool support both REST and Metadata APIs for gathering security configurations?

Yes, Salesforce security data extraction supports both REST and Metadata APIs to comprehensively gather configuration details for compliance assessments across multiple security scopes.