What problem does it solve? Running Salesforce Code Analyzer correctly requires knowing the v4+ CLI syntax, rule-selector expressions, engine prerequisites, and how to parse potentially huge JSON result files. This Skill translates natural-language requests into correct sf code-analyzer run commands, executes scans, and turns raw violations into actionable summaries and safe engine-provided fixes. ## Core Features & Use Cases - Scan orchestration: Builds correct rule selectors (engine, category, severity, specific rules) and targets (files, folders, globs, git diffs) for PMD, ESLint, CPD, RetireJS, Flow, SFGE, and ApexGuru engines. - Result exploration: Parses, filters, ranks, and aggregates scan results by engine, severity, file, rule, or category using bundled scripts instead of ad-hoc parsing. - Rule lookup and listing: Explains what a specific rule means and lists available rules by selector with typo-tolerant fuzzy matching. - Safe auto-fixing: Discovers engine-provided fixes, filters out vendor files (jQuery, Bootstrap, minified JS), asks for user confirmation, applies fixes, and summarizes the outcome. - Use Case: A developer says "check my changes for security issues" — the Skill diffs against the base branch, scans only changed files with all:Security:(1,2), and presents a severity-ranked violation table. ## Quick Start Ask the assistant to scan your Salesforce project for security issues and show the most critical violations first.
