sf-soql

Warn

Audited by Runlayer on Mar 14, 2026

Risk Level: MEDIUM
Scan Summary
Max Score
87%
Files
18
Flagged
6
Chunks
26
Flagged Files (6)
sf-soql/references/cli-commands.mdMEDIUM
87.1%

Tool passed security scan

Malicious tool definition detected

Description: COUNT() FROM Account" \ --target-org $ORG \ --json | jq -r '.result.totalSize') echo "Total accounts: $COUNT" # Get top accounts sf data query \ --query "SELECT Name, AnnualRevenue FROM Account ORDER BY AnnualRevenue DESC LIMIT 10" \ --target-org $ORG ``` ### Compare Orgs ```bash #!/bin/bash PROD_COUNT=$(sf data query --query "SELECT COUNT() FROM Account" --target-org prod --json | jq '.result.totalSize') SANDBOX_COUNT=$(sf data query --query "SELECT COUNT() FROM Account" --target-o

sf-soql/references/soql-reference.mdMEDIUM
84.9%

Tool passed security scan

Prompt Injection

sf-soql/assets/optimization-patterns.soqlLOW
74.1%

Tool passed security scan

Prompt Injection

Resource Abuse

sf-soql/references/anti-patterns.mdLOW
72.4%

Malicious tool definition detected

> **Sources**: [Apex Hours](https://www.apexhours.com/soql-best-practices/), [Beyond the Cloud](https://blog.beyondthecloud.dev/), [Medium - Bulkification Patterns](https://medium.com/@saurabh.samirs/salesforce-apex-triggers-5-bulkification-patterns-to-avoid-soql-dml-limits-f4e9c8bbfb3a) --- ## Anti-Pattern #1: SOQL Inside Loops **The Problem**: Executing queries inside a loop quickly exhausts the 100 SOQL query limit.

[ ] Check heap usage for large result sets ```bash # CLI Query Plan sf data query \ --query "SELECT Id FROM Account WHERE Name = 'Test'" \ --target-org my-org \ --use-tooling-api \ --plan ```

sf-soql/references/field-coverage-rules.mdLOW
61.3%

Tool passed security scan

sf-soql/SKILL.mdLOW
50.4%

Tool passed security scan

Passed Files (12)Click to expand
sf-soql/references/selector-patterns.mdOK
48.4%

Tool passed security scan

sf-soql/references/query-optimization.mdOK
48.3%

Tool passed security scan

sf-soql/assets/bulkified-query-pattern.clsOK
46.2%

Tool passed security scan

sf-soql/.claude/hooks.yamlOK
44.2%

Tool passed security scan

sf-soql/hooks/scripts/post-tool-validate.pyOK
42.1%

Tool passed security scan

sf-soql/README.mdOK
33.9%

Tool passed security scan

sf-soql/assets/basic-queries.soqlOK
32.3%

Tool passed security scan

sf-soql/assets/relationship-queries.soqlOK
28.9%

Tool passed security scan

sf-soql/assets/aggregate-queries.soqlOK
23.8%

Tool passed security scan

sf-soql/CREDITS.mdOK
22.4%

Tool passed security scan

sf-soql/assets/selector-class.clsOK
17.9%

Tool passed security scan

sf-soql/references/soql-syntax-reference.mdOK
4.2%

Tool passed security scan

Audit Metadata
Max File Score
87%
Classification
KNOWN_SERVER_PARTIAL_KNOWN
Files Scanned
18
Files Flagged
6
Chunks Analyzed
26
Analyzed
Mar 14, 2026, 11:55 PM
Security Audit — runlayer — sf-soql