Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add iblai/enterprise-agents --skill salesforcegit clone --depth 1 https://github.com/iblai/enterprise-agentsWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/iblai/enterprise-agents/salesforce)<a href="https://agentmods.dev/skills/iblai/enterprise-agents/salesforce"><img src="https://agentmods.dev/badge/skills/iblai/enterprise-agents/salesforce/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/iblai/enterprise-agents/salesforce"><img src="https://agentmods.dev/badge/skills/iblai/enterprise-agents/salesforce.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00034 | $0.00637 |
| Opus 5 | $0.00017 | $0.00318 |
| Sonnet 5 | $0.00007 | $0.00127 |
| Haiku 4.5 | $0.00003 | $0.00064 |
Grade A, and why
salesforce scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 9d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
How it starts
The opening of the file, as written. The whole thing — 41 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Salesforce
What it is
Salesforce is the world's leading CRM platform, used by enterprise sales, marketing, and support teams to manage customer relationships, revenue pipelines, and service cases. In this segment it serves as the authoritative system of record for accounts, deals, and customer interactions. Agents use it to surface deal context, log activity, track cases, and correlate campaign attribution with closed revenue.
When to use this skill
- Retrieving opportunity stage, amount, close date, or forecast category for a deal
- Looking up account details, contact profiles, or activity history for a prospect or customer
- Creating or updating a Service Cloud case on behalf of a customer support interaction
- Correlating marketing campaign data with pipeline influence and won revenue
- Checking entitlement records to determine support tier and SLA for an account
Credentials
This skill authenticates using variables from ~/.openclaw/.env (template: .env.example at the config root). Required variables:
SALESFORCE_INSTANCE_URL- base URL of the Salesforce org (e.g.https://mycompany.my.salesforce.com)SALESFORCE_CLIENT_ID- connected app consumer keySALESFORCE_CLIENT_SECRET- connected app consumer secretSALESFORCE_USERNAME- service account login emailSALESFORCE_PASSWORD- service account passwordSALESFORCE_SECURITY_TOKEN- API security token appended to password for login flow
Key operations
GET /services/data/vXX.0/sobjects/Opportunity/{id}- fetch opportunity recordGET /services/data/vXX.0/query?q=SELECT+...- run SOQL queryPATCH /services/data/vXX.0/sobjects/Case/{id}- update a support casePOST /services/data/vXX.0/sobjects/Task- log an activityGET /services/data/vXX.0/sobjects/Account/{id}- retrieve account details
Notes
- Use OAuth 2.0 JWT Bearer or username-password flow; prefer JWT for server-to-server.
- API version should match org version; default to
v59.0unless org is older. - Respect field-level security; queries against restricted fields return empty, not errors.
- Daily API limit is 15,000 calls per license for Enterprise edition; bulk queries count as one call.
- Sandbox orgs use
https://test.salesforce.comfor auth; setSALESFORCE_INSTANCE_URLaccordingly.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 9d ago First seen · 41 lines · 34 tokens per session scan A 9bd821295bf7
salesforce is a skill published in the GitHub repository iblai/enterprise-agents (11 stars, last pushed 3mo ago), licensed MIT. It adds 34 tokens to every session and 637 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
innovaccer
Innovaccer — lets an agent query population health analytics, patient risk scores, care gap lists, and SDOH screening data from the Innovaccer unified patient data platform.
availity
Availity Essentials — lets an agent perform real-time eligibility verification, prior authorization initiation and status checks, and payer enrollment management via the Availity clearinghouse REST API.
cerner-fhir
Cerner Millennium FHIR R4 API — lets an agent read patient clinical data (demographics, encounters, diagnoses, medications, notes) within a Cerner-hosted health system.
epic-fhir
Epic EHR FHIR R4 API — lets an agent read and write patient clinical data (demographics, encounters, diagnoses, medications, notes, orders) within an Epic-hosted health system.
healthstream
HealthStream LMS — lets an agent query employee training transcripts, assign compliance curricula, check credential expiration alerts, and pull completion reports from the HealthStream learning management system.
micromedex
Micromedex (Merative/IBM) — lets an agent perform drug interaction screening, dose range checking, toxicology lookups, and IV compatibility queries using the Micromedex drug knowledge base.