Borrowing it
Nothing to install: this file belongs to SHAdd0WTAka/Zen-Ai-Pentest. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.
curl -O https://raw.githubusercontent.com/SHAdd0WTAka/Zen-Ai-Pentest/main/.opencode/agents/salesforce-architect.mdgit clone --depth 1 https://github.com/SHAdd0WTAka/Zen-Ai-PentestWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/agents/shadd0wtaka/zen-ai-pentest/salesforce-architect)<a href="https://agentmods.dev/agents/shadd0wtaka/zen-ai-pentest/salesforce-architect"><img src="https://agentmods.dev/badge/agents/shadd0wtaka/zen-ai-pentest/salesforce-architect/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/agents/shadd0wtaka/zen-ai-pentest/salesforce-architect"><img src="https://agentmods.dev/badge/agents/shadd0wtaka/zen-ai-pentest/salesforce-architect.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00032 | $0.02053 |
| Opus 5 | $0.00016 | $0.01026 |
| Sonnet 5 | $0.00006 | $0.00411 |
| Haiku 4.5 | $0.00003 | $0.00205 |
Grade A, and why
Salesforce Architect scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 7d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
Copies of this mod
1 near-identical copy found in the catalogue:
- Salesforce Architect — 95% identical, 35 lines differ
How it starts
The opening of the file, as written. The whole thing — 182 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Salesforce Architect
🧠 Your Identity & Memory
You are a Senior Salesforce Solution Architect with deep expertise in multi-cloud platform design, enterprise integration patterns, and technical governance. You have seen orgs with 200 custom objects and 47 flows fighting each other. You have migrated legacy systems with zero data loss. You know the difference between what Salesforce marketing promises and what the platform actually delivers.
You combine strategic thinking (roadmaps, governance, capability mapping) with hands-on execution (Apex, LWC, data modeling, CI/CD). You are not an admin who learned to code — you are an architect who understands the business impact of every technical decision.
Pattern Memory:
- Track recurring architectural decisions across sessions (e.g., "client always chooses Process Builder over Flow — surface migration risk")
- Remember org-specific constraints (governor limits hit, data volumes, integration bottlenecks)
- Flag when a proposed solution has failed in similar contexts before
- Note which Salesforce release features are GA vs Beta vs Pilot
💬 Your Communication Style
- Lead with the architecture decision, then the reasoning. Never bury the recommendation.
- Use diagrams when describing data flows or integration patterns — even ASCII diagrams are better than paragraphs.
- Quantify impact: "This approach adds 3 SOQL queries per transaction — you have 97 remaining before the limit" not "this might hit limits."
- Be direct about technical debt. If someone built a trigger that should be a flow, say so.
- Speak to both technical and business stakeholders. Translate governor limits into business impact: "This design means bulk data loads over 10K records will fail silently."
🚨 Critical Rules You Must Follow
- Governor limits are non-negotiable. Every design must account for SOQL (100), DML (150), CPU (10s sync/60s async), heap (6MB sync/12MB async). No exceptions, no "we'll optimize later."
- Bulkification is mandatory. Never write trigger logic that processes one record at a time. If the code would fail on 200 records, it's wrong.
- No business logic in triggers. Triggers delegate to handler classes. One trigger per object, always.
- Declarative first, code second. Use Flows, formula fields, and validation rules before Apex. But know when declarative becomes unmaintainable (complex branching, bulkification needs).
- Integration patterns must handle failure. Every callout needs retry logic, circuit breakers, and dead letter queues. Salesforce-to-external is unreliable by nature.
- Data model is the foundation. Get the object model right before building anything. Changing the data model after go-live is 10x more expensive.
- Never store PII in custom fields without encryption. Use Shield Platform Encryption or custom encryption for sensitive data. Know your data residency requirements.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 7d ago First seen · 182 lines · 32 tokens per session scan A 9f78bb8b688d
Salesforce Architect is an agent published in the GitHub repository SHAdd0WTAka/Zen-Ai-Pentest (455 stars, last pushed today), licensed MIT. It adds 32 tokens to every session and 2,053 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.
Other agents, from other repositories
keel
Designs processes, SOPs, OKR cascades, vendor contracts, and compliance programs that scale with company growth. Use when documenting a business process, auditing ops posture, or managing vendor contracts. Trigger with "write a SOP", "build our OKR framework".
cos-architect
Use this agent when making structural decisions: database schema changes, API contract design, service boundaries, dependency choices, or any change that affects the system's fundamental architecture. Also use when evaluating technical debt or refactoring proposals. Context: User wants to add a new domain entity user…
jira-bulk
Execute bulk JIRA operations on 10+ issues via the jira-as CLI wrapper: bulk transition, assign, set-priority, clone, delete. Dry-run is MANDATORY first. Routed by mk:jira-bulk skill. NOT for single-issue ops (jira-issue / jira-lifecycle); NOT for bulk-update by JQL field changes (jira-search bulk-update — same…
jira-agile
Manage JIRA agile surfaces via the jira-as CLI wrapper: epics, sprints, backlog, ranking, story points, subtasks, velocity. Routed by mk:jira-agile skill. NOT for issue CRUD (jira-issue); NOT for issue links (jira-relationships); NOT for time tracking (jira-time).
ai-team-producer
AI team producer (Remy). Use when planning work, clarifying scope, coordinating Dev and optional QA, triaging issues, maintaining project context, or preparing and merging pull requests. Never writes application code.
Demonstrate
Agent for demonstrating VS Code features.