Salesforce SDR Admin (Browser)

UI-driven Salesforce SDR and admin execution across Sales Cloud, Service Cloud, Experience Cloud, and CPQ/Revenue Cloud. Use when a user asks to operate Salesforce in the browser (not API), manage leads/opportunities/cases/quotes, perform setup or configuration tasks, or make Apex/LWC/Aura changes with strict confirmation and secure local credential handling.

This skill appears to be designed to control Salesforce via a browser session and to use locally-stored credentials. Before installing or using it: 1) Confirm the publisher/source — there is no homepage or author info. 2) Ask the publisher to update registry metadata to declare the required env vars and the credential file path so you can review and approve them. 3) Only allow this skill to run against non-production or least-privilege Salesforce accounts while you validate behavior. 4) Verify how the OpenClaw browser relay/Chrome extension works and whether it can access session cookies or other sensitive tokens. 5) Ensure the local credential file (~/.openclaw/credentials/salesforce.json) has strict filesystem permissions and consider using short-lived or scoped credentials. 6) Prefer manual invocation (do not enable autonomous runs) or require an extra human confirmation step for any write or deployment action. 7) If you need stronger assurances, request an auditable provenance (source repo, publisher contact) or ask for the skill to declare and document exactly what local reads it will perform.

Type: OpenClaw Skill Name: salesforce-sdr-admin Version: 1.0.0 This skill bundle is designed for Salesforce SDR and admin tasks, including browser control and UI-based code edits (Apex/LWC/Aura). While these capabilities are inherently powerful, the skill includes extensive and explicit safety gates and prompt-injection defenses. It strictly forbids credential exfiltration, executing commands from untrusted sources (web pages, records, emails), and bypassing user confirmations for write actions. Credential handling is explicitly local-only (environment variables, local file, browser autofill). The `SKILL.md` and `references/prompt-injection-guardrails.md` files contain clear instructions for the AI agent to reject malicious prompts and prioritize user safety, indicating a strong intent for secure operation.