Salesforce-Code-Review-Agent: Salesforce DX code review: Apex, LWC, Flows, security (CRUD/FLS), governors, and Bugbot

by rediga · AI Tool · ★ 95

Last updated: · Indexed by AgentSkillsHub · Auto-synced every 8h

How to install Salesforce-Code-Review-Agent

git clone https://github.com/rediga/Salesforce-Code-Review-Agent.git

Taken from the project's README on GitHub. Check the security audit before running it.

Security audit verdict: SAFE · quality 72/100

None of the 42 rules matched — no credential harvesting, no data exfiltration, no curl-pipe-shell installer. Scanned against 42 published rules built on the SlowMist agent-security taxonomy, refreshed every 8 hours. Full audit →

The quality score combines nine heuristic checks of the repo and its README: completeness, clarity, specificity, examples, structure, agent readiness, step-by-step content, instruction quality and security notes. It rates how well the project explains itself to an agent, not the code.

apexcode-reviewcursorflowlwcsalesforcesalesforce-dxsecurity

Quick Facts

Stars95
Forks121
LanguagePowerShell
CategoryAI Tool
LicenseMIT
Quality Score72/100
Open Issues1
Last Updated2026-10-10
Created2026-09-08
Est. Tokens~5k

About Salesforce-Code-Review-Agent

Salesforce Code Review Agent A Cursor agent that reviews Salesforce DX source the way a platform architect would: Apex, Lightning Web Components, Aura, Flows, and metadata. It packages: A skill () with checklists for governors, CRUD/FLS, injection, tests, LWC XSS, and Flow bulkification A read-only subagent () so reviews run in their own context A slash command () Rules that apply when Apex, LWC,...

Salesforce-Code-Review-Agent alternative? Top 6 similar tools

Looking for a Salesforce-Code-Review-Agent alternative? If you're comparing Salesforce-Code-Review-Agent with other ai tool tools, these 6 projects are the closest alternatives on Agent Skills Hub — ranked by topic overlap, star count, and community traction.

  • aiAgentStudio by iamsonal · ⭐ 82

    Run AI agents inside Salesforce on standard licenses. Pluto Core handles model calls, tools, approvals, recove

  • toolhive-studio by stacklok · ⭐ 171

    ToolHive is an application that allows you to install, manage and run MCP servers and connect them to AI agent

  • mcp-audit by apisec-inc · ⭐ 153

    See what your AI agents can access. Scan MCP configs for exposed secrets, shadow APIs, and AI models. Generate

  • sage by usetig · ⭐ 106

    An LLM council that reviews your coding agent's every move

  • lucidity-mcp by hyperb1iss · ⭐ 90

    AI-powered code quality analysis using MCP to help AI assistants review code more effectively. Analyze git cha

  • agent-skills by AsyrafHussin · ⭐ 70

    Skills for AI coding agents — Laravel, PHP, React, TypeScript, testing, security, and code quality.

More AI Tool Tools

Explore other popular ai tool tools:

View all AI Tool tools →

Popular PowerShell Agent Tools

How this security grade is produced

Grades come from a rule-based scan built on the SlowMist agent-security taxonomy: 42 published rules, covering credential harvesting, data exfiltration, curl | sh installers and more. It is a first-layer scan, not a manual audit — we say so rather than overstate it.

The scale of the problem is documented independently: Liu et al. (2026), in a study of 31,132 agent skills, report that 26.1% contain security vulnerabilities. Our own full-catalog census is published as a citable open dataset.

Sources & who's responsible:

View on GitHub → Browse AI Tool tools