Salesforce Skills Library (sf-skills) - Setup Guide¶

Source: skills.sh (100+ skills indexed, ~500K combined installs; top skill platform-apex-generate at 6,109) GitHub: forcedotcom/sf-skills (978⭐, 330 forks, Apache-2.0, pushed Sep 8, 2026) Category: Development / CRM First Seen: Sep 9, 2026 sweep (cluster surfaced via failed-query compensation; not previously evaluated) Quality Tier: 🟡 Production, authority-justified (official Salesforce org; most skills Pass all audits - two flagged skills disclosed under Security)

Salesforce's official curated collection of agent skills for building on the Salesforce platform - 330+ skills covering Apex development, metadata and SOQL, Flow automation, Lightning Web Components, SLDS design systems, Agentforce, Experience Cloud, Commerce B2B, Data360, Omnistudio, and DX DevOps. Follows the open Agent Skills specification and is installable by any agent, including Hermes.

Installation¶

npx skills add forcedotcom/sf-skills

For Hermes Agent, copy from a clone:

git clone --depth 1 https://github.com/forcedotcom/sf-skills.git
cp -r sf-skills/skills/* ~/.hermes/skills/

⚠️ From the README: "Expect frequent changes. The Salesforce skills library is evolving rapidly... Skills may be renamed, restructured, or removed between releases." Re-sync before long projects.

Prerequisites¶

Requirement	Details
Hermes Agent	Skills directory support (`~/.hermes/skills/`)
Salesforce CLI (`sf`)	`npm install -g @salesforce/cli` - required for org login, deploy, retrieve, test run
Salesforce org credentials	Dev org (free Developer Edition) or sandbox; `sf org login web`
Node.js 18+	For `npx skills` and the Salesforce CLI

Skill Roster (highlights of 100+ indexed)¶

Domain	Representative skills
Platform / Apex	`platform-apex-generate` (6,109 - primary Apex authoring), `platform-apex-test-generate`, `platform-apex-logs-debug`, `platform-apex-test-run`, `platform-soql-query`, `platform-metadata-deploy/retrieve`, custom objects/fields/tabs/apps, permission sets, validation rules, sharing rules, flexipages, list views
Agentforce	`agentforce-generate`, `agentforce-architecture-analyze`, `agentforce-test`, `agentforce-observe`, `agentforce-d360-analyze`
Design	`design-systems-slds-validate`, `design-systems-slds-apply`, `design-systems-slds2-migrate`
Experience Cloud	`experience-lwc-generate`, `experience-ui-bundle-` (9 skills), `experience-cms-` (content generation)
DX DevOps	`dx-code-analyzer-run/configure`, `dx-org-manage/switch`, `dx-devops-test-*`
Integration	`integration-connectivity-connected-app-configure`, `integration-connectivity-generate`, eventing (CDC) subscriptions
Commerce B2B / Data360 / Omnistudio / Mobile	store creation, schema/code-extension generation, datamapper/omniscript/flexcard generation, mobile app creation
Sep 29, 2026 sweep	`platform-models-api-configure` (4,072), `developing-agentforce` (3,893), `service-helpagent-coordinate` (2,362)

Quick Start¶

Install skills + Salesforce CLI; sf org login web into a dev org
"Create a custom object for X" → platform-custom-object-generate
"Write an Apex batch job that Y" → platform-apex-generate
"Deploy this metadata" → platform-metadata-deploy

CorpusIQ Use Cases¶

Use Case	How
CRM integration roadmap	CorpusIQ serves business operators who live in Salesforce - the agent gains working knowledge of the platform's extension points (Apex, Flow, LWC, Agentforce) for connector planning and operator Q&A
Operator support	Answer Salesforce automation questions (objects, fields, permission sets, flows) with spec-accurate generation instead of guesswork
Prototyping integrations	Scaffold Apex REST resources or connected apps to validate Salesforce integration ideas before engineering time
Demo content	Build working Salesforce app/flow demos for outreach to Salesforce-heavy ICP accounts

Integration with CorpusIQ¶

CorpusIQ is the connector layer that lets AI assistants read the systems a business already runs on - accounting, payments, CRM, email, files and analytics - and answer with the source named. It is read-only by design: it retrieves data and never writes to, or acts in, a connected system, which is what makes it safe to point at live accounts.

This page is part of the CorpusIQ directory, the reference we maintain for the MCP server and agent-skill ecosystem. Run alongside CorpusIQ, a third-party server like this one can be combined with a company's own business data in a single answer.

See what CorpusIQ connects

Limitations / Verification¶

Two flagged skills (see Security) - install the rest freely
Repo churn: skills may be renamed/removed between releases (README warning); pin a commit or re-sync deliberately
minApiVersion: 66.0 on platform skills - older orgs may need API version alignment

# Verify skill installed
ls ~/.hermes/skills/platform-apex-generate/SKILL.md
# Verify Salesforce CLI
sf version

Security¶

Spot-checked Sep 9, 2026: platform-apex-generate Pass all three audits. Flagged skills:

Skill	Trust Hub	Socket	Snyk	Note
`experience-content-media-search`	Pass	Pass	Fail (HIGH W007)	Insecure credential handling - instructs the agent to insert signed CMS/DAM URLs (including auth query params) verbatim into code. Signed URLs are the platform's auth mechanism, but avoid echoing them into logs/commits
`agentforce-generate`	Pass	Warn	Pass	Socket warning; review generated Agentforce configs before deploy

The library is Apache-2.0, published by the official Salesforce org, and the vast majority of skills carry clean audits.

← Skills Catalog | Marketplace → Powered by CorpusIQ