技能详情（站内镜像，无评论）
许可证：MIT-0
MIT-0 ·免费使用、修改和重新分发。无需归因。
版本：v1.0.0
统计：⭐ 0 · 2.3k · 7 current installs · 9 all-time installs
⭐ 0
安装量（当前） 9
🛡 VirusTotal ：可疑 · OpenClaw ：良性
Package：arvorco/salesforce
安全扫描（ClawHub）
- VirusTotal ：可疑
- OpenClaw ：良性
OpenClaw 评估
The skill's requirements, install steps, and runtime instructions match its stated purpose (using the Salesforce CLI) and there are no incoherent or unrelated requests, but it will handle sensitive Salesforce credentials and perform destructive org operations if authenticated.
目的
Name and description describe Salesforce CLI operations; the skill requires the 'sf' binary and provides an npm install for @salesforce/cli which legitimately supplies that binary. No unrelated binaries, env vars, or config paths are requested.
说明范围
SKILL.md contains detailed sf CLI commands for queries, record create/update/delete, Apex execution, metadata deploys, and multiple authentication flows. These instructions are within the skill's stated scope. They explicitly reference sensitive actions and outputs (access tokens, refresh tokens, JWT key files) and correctly note that authentication is required and that some commands reveal sensitive info. The agent will be able to run command…
安装机制
Install uses the official-looking npm package @salesforce/cli to provide the 'sf' binary, and the README also points to developer.salesforce.com. Installing via npm is a standard, reasonable approach. Note: a global npm install may require elevated permissions and runs package postinstall scripts like any npm package.
证书
The skill declares no required environment variables or config paths, which is consistent because authentication is performed via the CLI at runtime. However, the instructions reference local credential artifacts (JWT key files, sfdx auth URL files) and commands that surface tokens; those are sensitive but appropriate for a Salesforce CLI integration. Users should be aware the agent will be able to access any credential files it is directed to…
持久
always:false and user-invocable:true (with normal autonomous invocation allowed) — typical and appropriate. The skill does not request system-wide persistence or modification of other skills. Caution: if the agent is granted Salesforce credentials, autonomous invocation could allow it to perform destructive changes in the org; that is an operational risk, not an incoherence.
综合结论
This skill appears to be what it says: a wrapper around the Salesforce CLI. Before installing, consider: 1) The CLI will require you to authenticate to a Salesforce org; those credentials (access tokens, refresh tokens, JWT key files, sfdx auth URLs) are sensitive — avoid exposing them to an agent you don't trust. 2) The skill can run destructive operations (create/update/delete, deploy, execute Apex). Only enable autonomous invocation if you …
安装（复制给龙虾 AI）
将下方整段复制到龙虾中文库对话中，由龙虾按 SKILL.md 完成安装。
请把本段交给龙虾中文库（龙虾 AI）执行：为本机安装 OpenClaw 技能「Salesforce Skill」。简介：Query and manage Salesforce CRM data via the Salesforce CLI (`sf`). Run SOQL/SO…。
请 fetch 以下地址读取 SKILL.md 并按文档完成安装：https://raw.githubusercontent.com/openclaw/skills/refs/heads/main/skills/arvorco/salesforce/SKILL.md
（来源：yingzhi8.cn 技能库）SKILL.md
暂无本地缓存内容，可在后台执行详情同步。