What is sfdx-iq AGENTS.md?

An AGENTS.md instruction set for a Salesforce development plugin. AGENTS.md is a file that tells coding agents how to work in a project.

Use it to guide reviews, architecture planning, deployment preparation, Apex and Lightning Web Component work, and other Salesforce development tasks.

It gives the agent shared rules for Salesforce limits, security, tests, handling many records, planning, and delegating work to specialist agents.

How bhanu91221/sfdx-iq configures Codex and OpenCode

Reuse

Borrowing it

Nothing to install: this file belongs to bhanu91221/sfdx-iq. Take a copy, put it at the same path in your own repository, and replace the rules that are about this project with yours.

Copy the file

curl -O https://raw.githubusercontent.com/bhanu91221/sfdx-iq/main/AGENTS.md

Clone the repo

git clone --depth 1 https://github.com/bhanu91221/sfdx-iq

Made for: Codex, OpenCode.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

README.md

[![agentmods](https://agentmods.dev/badge/instructions/bhanu91221/sfdx-iq/agents-md/github.svg)](https://agentmods.dev/instructions/bhanu91221/sfdx-iq/agents-md)

Your own site

<a href="https://agentmods.dev/instructions/bhanu91221/sfdx-iq/agents-md"><img src="https://agentmods.dev/badge/instructions/bhanu91221/sfdx-iq/agents-md/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

Your own site · 80×15

<a href="https://agentmods.dev/instructions/bhanu91221/sfdx-iq/agents-md"><img src="https://agentmods.dev/badge/instructions/bhanu91221/sfdx-iq/agents-md.svg" alt="Reviewed on agentmods" width="80" height="20"></a>

Per session 1,289 This file is loaded in full into every session.

When invoked 1,289 The same file — it is already loaded in full.

Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.

Origin original No closer match found in the catalogue.

Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

Model	Per session	Once invoked
Fable 5.1	$0.01289	$0.01289
Opus 5.5	$0.00516	$0.00516
Sonnet 5.5	$0.00258	$0.00258
Haiku 4.5	$0.00129	$0.00129

Measured 2mo ago against content hash 28c3bbf56986, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

sfdx-iq AGENTS.md scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2mo ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

AGENTS.md · 114 lines

How it starts

The opening of the file, as written. The whole thing — 114 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Claude SFDX IQ — Agent Instructions

This is a Salesforce DX Claude Code plugin providing 7 specialized agents, 21 self-contained commands, 5 hook definitions, 16 hook scripts, and 5 CLI tools for Salesforce development.

Core Principles

Governor-Limits-First — Every code path evaluated for SOQL, DML, CPU, heap limits
Security-First — CRUD/FLS enforcement, with sharing, no SOQL injection
Test-Driven — 75% minimum (90%+ target), Apex test-first, LWC Jest
Bulkification Always — Handle 200+ records in every trigger and batch context
Plan Before Execute — Plan complex Salesforce features before writing code
Agent-First — Delegate to specialized Salesforce agents for domain tasks

Available Agents

Agent	Purpose	When to Use
apex-code-reviewer	Apex quality: bulkification, SOQL selectivity, N+1, governor limits	After writing/modifying Apex code
solution-designer	Solution architecture, phased implementation plans, integration design	Complex features, architectural decisions
devops-coordinator	Deployment strategy, test patterns, org health, CI/CD pipelines	Deploy planning, org health checks
lwc-reviewer	LWC component quality: wire, events, accessibility, performance	After writing/modifying LWC components
security-auditor	CRUD/FLS, sharing model, SOQL injection, XSS, CSP, guest user	Security-sensitive code, before commits
flow-analyst	Flow best practices: DML in loops, fault paths, recursion, naming	Flow automation analysis and review
integration-specialist	REST/SOAP callouts, Named Credentials, platform events, CDC	Integration code, external services

Agent Orchestration

Commands invoke agents automatically. Use agents proactively without user prompt:

Apex code written/modified → apex-code-reviewer
LWC code written/modified → lwc-reviewer
Security-sensitive code → security-auditor
Flow automation added/changed → flow-analyst
Integration/callout code → integration-specialist
Architectural decision → solution-designer
Deployment operations → devops-coordinator

Read the full file on GitHub · 114 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

2mo ago First seen · 114 lines · 1,289 tokens per session scan A 28c3bbf56986

Subscribe to this mod's changes

sfdx-iq AGENTS.md is an instructions file published in the GitHub repository bhanu91221/sfdx-iq (2 stars, last pushed 6mo ago), licensed MIT. It adds 1,289 tokens to every session, about $0.0052 per session on Opus 5.5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

sfdx-iq AGENTS.md next to 6 instructions from other repositories
Mod	Type	Stars	Last push	Licence	Scan	Tokens	Works with
sfdx-iq AGENTS.mdbhanu91221/sfdx-iq	Instructions file	2	6mo ago	MIT	A	1,289	Codex, OpenCode
vscode buildNext.instructions.mdmicrosoft/vscode	Instructions file	195k	today	MIT	A	9,719	GitHub Copilot
next.js AGENTS.mdvercel/next.js	Instructions file	143k	today	MIT	A	7,461	Codex, OpenCode
vscode oss-third-party-notices.instructions.mdmicrosoft/vscode	Instructions file	195k	today	MIT	A	5,649	GitHub Copilot
langchain AGENTS.mdlangchain-ai/langchain	Instructions file	149k	today	MIT	A	4,680	Codex, OpenCode
vscode copilot-instructions.mdmicrosoft/vscode	Instructions file	195k	today	MIT	A	3,093	GitHub Copilot
vscode model-prompts.instructions.mdmicrosoft/vscode	Instructions file	195k	today	MIT	A	2,022	GitHub Copilot

sfdx-iq: Instructions file for Codex