sf-lwc

Fail

Audited by Runlayer on Mar 14, 2026

Risk Level: HIGH
Scan Summary
Max Score
92%
Files
58
Flagged
10
Chunks
85
Flagged Files (10)
sf-lwc/references/cli-commands.mdHIGH
92.2%

Tool passed security scan

Risky tool definition detected

```bash # Install Code Analyzer v5 plugin sf plugins install @salesforce/plugin-code-analyzer # Run scan on LWC components sf code-analyzer run \ --workspace force-app/main/default/lwc \ --output-file lwc-scan-results.html # Run with specific rules sf code-analyzer run \ --workspace force-app/main/default/lwc \ --rule-selector "Category:Best Practices,Security" ``` > **Migration from sfdx-scanner**: v5 uses `--workspace` instead of `--target`, `--output-file` instead of `--outfile` (format infer

sf-lwc/hooks/scripts/lwc-lsp-validate.pyLOW
73.2%

Malicious tool definition detected

sf-lwc/references/component-patterns.mdLOW
72.9%

Tool passed security scan

Risky tool definition detected

Description: == null) { throw new AuraHandledException('Account ID is required'); } List<Contact> contacts = [ SELECT Id, Name, Email, Phone FROM Contact WHERE AccountId = :accountId WITH SECURITY_ENFORCED ORDER BY Name LIMIT 100 ]; return contacts; } catch (Exception e) { throw new AuraHandledException('Error fetching contacts: ' + e.getMessage()); } } ``` --- ## Related Resources - [lms-guide.md](lms-guide.md) - Lightning Message Service deep dive - [jest-testing.md](jest-testing.md) - Advance

sf-lwc/assets/flow-screen-component/flowScreenComponent.jsLOW
67.4%

Tool passed security scan

sf-lwc/hooks/scripts/validate_slds.pyLOW
62.4%

Tool passed security scan

sf-lwc/hooks/scripts/post-tool-validate.pyLOW
60.0%

Tool passed security scan

sf-lwc/references/performance-guide.mdLOW
59.8%

Tool passed security scan

sf-lwc/references/jest-testing.mdLOW
53.4%

Tool passed security scan

sf-lwc/.claude/hooks.yamlLOW
53.2%

Tool passed security scan

sf-lwc/references/async-notification-patterns.mdLOW
52.6%

Tool passed security scan

Passed Files (48)Click to expand
sf-lwc/SKILL.mdOK
46.8%

Tool passed security scan

sf-lwc/references/flow-integration-guide.mdOK
41.3%

Tool passed security scan

sf-lwc/references/lwc-best-practices.mdOK
36.4%

Tool passed security scan

sf-lwc/assets/message-channel/lmsPublisher.jsOK
36.2%

Tool passed security scan

sf-lwc/hooks/scripts/template_validator.pyOK
34.4%

Tool passed security scan

sf-lwc/README.mdOK
34.2%

Tool passed security scan

sf-lwc/assets/apex-controller/LwcController.clsOK
33.6%

Tool passed security scan

sf-lwc/references/advanced-features.mdOK
33.1%

Tool passed security scan

sf-lwc/CREDITS.mdOK
33.0%

Tool passed security scan

sf-lwc/assets/message-channel/lmsSubscriber.jsOK
28.0%

Tool passed security scan

sf-lwc/references/state-management.mdOK
27.2%

Tool passed security scan

sf-lwc/assets/state-store/store.jsOK
26.9%

Tool passed security scan

sf-lwc/references/lms-guide.mdOK
25.6%

Tool passed security scan

sf-lwc/assets/jest-test/componentName.test.jsOK
25.5%

Tool passed security scan

sf-lwc/assets/form-component/formComponent.jsOK
25.0%

Tool passed security scan

sf-lwc/references/triangle-pattern.mdOK
24.6%

Tool passed security scan

sf-lwc/assets/typescript-component/typescriptComponent.tsOK
24.2%

Tool passed security scan

sf-lwc/assets/typescript-component/__tests__/typescriptComponent.test.tsOK
22.5%

Tool passed security scan

sf-lwc/assets/typescript-component/typescriptComponent.cssOK
19.5%

Tool passed security scan

sf-lwc/assets/flow-screen-component/flowScreenComponent.cssOK
18.9%

Tool passed security scan

sf-lwc/assets/graphql-component/graphqlComponent.jsOK
17.3%

Tool passed security scan

sf-lwc/references/accessibility-guide.mdOK
17.3%

Tool passed security scan

sf-lwc/assets/typescript-component/typescriptComponent.js-meta.xmlOK
16.6%

Tool passed security scan

sf-lwc/assets/basic-component/basicComponent.jsOK
15.3%

Tool passed security scan

sf-lwc/references/template-anti-patterns.mdOK
12.3%

Tool passed security scan

sf-lwc/assets/basic-component/basicComponent.cssOK
12.2%

Tool passed security scan

sf-lwc/assets/flow-screen-component/flowScreenComponent.js-meta.xmlOK
9.6%

Tool passed security scan

sf-lwc/references/scoring-and-testing.mdOK
8.8%

Tool passed security scan

sf-lwc/assets/form-component/formComponent.htmlOK
8.3%

Tool passed security scan

sf-lwc/hooks/scripts/slds_data/styling_hooks.jsonOK
6.0%

Tool passed security scan

sf-lwc/hooks/scripts/slds_data/deprecated_patterns.jsonOK
6.0%

Tool passed security scan

sf-lwc/hooks/scripts/slds_linter_wrapper.pyOK
4.9%

Tool passed security scan

sf-lwc/assets/basic-component/basicComponent.js-meta.xmlOK
4.7%

Tool passed security scan

sf-lwc/hooks/scripts/slds_rules/__init__.pyOK
4.3%

Tool passed security scan

sf-lwc/assets/typescript-component/typescriptComponent.htmlOK
4.1%

Tool passed security scan

sf-lwc/assets/datatable-component/datatableComponent.jsOK
3.3%

Tool passed security scan

sf-lwc/assets/workspace-api/workspaceComponent.htmlOK
3.3%

Tool passed security scan

sf-lwc/assets/modal-component/modalComponent.htmlOK
3.0%

Tool passed security scan

sf-lwc/assets/record-picker/recordPicker.jsOK
2.9%

Tool passed security scan

sf-lwc/hooks/scripts/slds_data/valid_slds_classes.jsonOK
2.3%

Tool passed security scan

sf-lwc/assets/workspace-api/workspaceComponent.jsOK
2.1%

Tool passed security scan

sf-lwc/assets/flow-screen-component/flowScreenComponent.htmlOK
2.0%

Tool passed security scan

sf-lwc/assets/message-channel/RecordSelected.messageChannel-meta.xmlOK
1.9%

Tool passed security scan

sf-lwc/assets/modal-component/modalComponent.jsOK
1.9%

Tool passed security scan

sf-lwc/assets/graphql-component/graphqlComponent.htmlOK
1.7%

Tool passed security scan

sf-lwc/assets/basic-component/basicComponent.htmlOK
1.7%

Tool passed security scan

sf-lwc/assets/record-picker/recordPicker.htmlOK
1.7%

Tool passed security scan

sf-lwc/assets/datatable-component/datatableComponent.htmlOK
1.4%

Tool passed security scan

Audit Metadata
Max File Score
92%
Classification
KNOWN_SERVER_PARTIAL_KNOWN
Files Scanned
58
Files Flagged
10
Chunks Analyzed
85
Analyzed
Mar 14, 2026, 11:44 PM
Security Audit — runlayer — sf-lwc