forcedotcom avatar

Generating Permission Set

This generates deployable Salesforce permission set XML with object CRUD, field-level security, user permissions, tab visibility, and Apex access. The real value is in the guardrails: it explicitly checks that you're not setting FLS on required fields, which is the number one reason permission set deployments fail. It handles the annoying naming conventions (custom tabs need __c, standard ones get the "standard-" prefix) and walks through the hierarchy of permissions in the right order. If you've ever had a permission set bomb during deployment because you accidentally included a required field or fat-fingered a tab name, this catches that before you waste a deployment slot.

skills.sh installs
4K
GitHub stars
1.2K
last updated
Aug 21, 2026

Install

$ npx -y skills add forcedotcom/sf-skills --skill generating-permission-set --agent claude-code

Installs into .claude/skills of the current project.

Files

This generates deployable Salesforce permission set XML with object CRUD, field-level security, user permissions, tab visibility, and Apex access. The real value is in the guardrails: it explicitly checks that you're not setting FLS on required fields, which is the number one reason permission set deployments fail. It handles the annoying naming conventions (custom tabs need __c, standard ones get the "standard-" prefix) and walks through the hierarchy of permissions in the right order. If you've ever had a permission set bomb during deployment because you accidentally included a required field or fat-fingered a tab name, this catches that before you waste a deployment slot.

Browse the repository on GitHub

Sponsors

Details

Repository
github.com/forcedotcom/sf-skills
Categories
Security, Sales & Marketing
First seen
Jun 3, 2026

More from forcedotcom/sf-skills

All 158

Recommended

More Security
1dotnet avatartest-taggingdotnet/skillsAnalyzes test suites in any language and tags each test with standardized traits (positive, negative, critical-path, boundary, smoke, regression, integration, p4Kskills.sh installs
2yaklang avatarkubernetes-pentestingyaklang/hack-skillsKubernetes penetration testing playbook. Use when targeting Kubernetes clusters via API server, RBAC enumeration, service account abuse, etcd access, Kubelet AP3.9Kskills.sh installs
3forcedotcom avatargenerating-lightning-appforcedotcom/sf-skillsBuild complete Salesforce Lightning Experience applications from natural language descriptions. Use this skill when a user requests a "complete app", "Lightning3.9Kskills.sh installs
4yaklang avatarios-pentesting-tricksyaklang/hack-skillsiOS pentesting playbook. Use when testing iOS applications for keychain extraction, URL scheme hijacking, Universal Links exploitation, runtime manipulation, bi3.9Kskills.sh installs
5yaklang avatarinjection-checkingyaklang/hack-skillsEntry P1 category router for injection testing. Use when routing between XSS, SQLi, SSRF, XXE, SSTI, command injection, and NoSQL injection workflows based on h3.9Kskills.sh installs
6yaklang avatarrecon-for-secyaklang/hack-skillsEntry P1 category router for reconnaissance and methodology. Use when mapping scope, discovering assets, fingerprinting technology, building endpoint inventory,3.9Kskills.sh installs