Individual skill
dx-apexguru-scan
Run an ApexGuru performance scan on a Salesforce Apex project via the ApexGuru SFAP Scan API. Zips the project's Apex (any layout), submits it, polls to completion, decodes the base64 report, and presents performance antipattern violations (SOQL in loop, DML in loop, Schema.getGlobalDescribe(), SOQL without WHERE/LIMIT, unused SOQL fields) grouped by rule with severity, file:line, and suggested fixes — clearly attributed as 'Static only' or 'Production insights'. TRIGGER when the user says 'run ApexGuru', 'ApexGuru scan', 'check Apex performance', 'find governor-limit / performance antipatterns', 'SOQL in loop', 'scan my Apex for performance', or 'ApexGuru performance insights'. DO NOT TRIGGER for general static analysis or security scans (use dx-code-analyzer-run), for fixing code without scanning, or for onboarding an org to ApexGuru.
skills/dx-apexguru-scan/SKILL.md
Source commit a8a18ce1e4ba12e69b4073eab98ce31bfbd8271e
What was checked
- Matches the observed repository HEAD
- Yes
- Scanner rules are current
- No
- Repository scan complete
- No
- Skill scan complete
- No
- Observed behavior
- Not checked yet
- Last checked
- Nov 4, 2026
These are observations at the recorded commit, not a guarantee of safety. Review the source before running it.
Install this skill
Choose an agent in your Stack or copy a command below. Commands fetch the pinned commit and copy only this skill directory. Existing destinations are refused. Copying a command does not install anything.
An install command is unavailable: current rules, complete repository and skill scans, an eligible behavior level and a permitted license are required.
Repository context
- Repository stars (not skill ratings)
- 1,151
- Repository last updated
- Nov 6, 2026
- License
- Apache-2.0
Observed agent integration: No specific integration evidence. Standard SKILL.md installation does not imply verified compatibility.
- security Derived category
Files and excerpt
File metadata and permitted, redacted excerpts come from the recorded scan. Source links are pinned to that commit.
Browse files
SKILL.mdcore · 20,562 bytesSKILL.mdcore · 20,562 bytesSKILL.mdcore · 20,562 bytesSKILL.mdcore · 20,562 bytesSKILL.mdcore · 20,562 bytesSKILL.mdcore · 20,562 bytesSKILL.mdcore · 20,562 bytesSKILL.mdcore · 20,562 bytesSKILL.mdcore · 20,562 bytesSKILL.mdcore · 20,562 bytesSKILL.mdcore · 20,562 bytesSKILL.mdcore · 20,562 bytesSKILL.mdcore · 20,562 bytesSKILL.mdcore · 20,562 bytesSKILL.mdcore · 20,562 bytesSKILL.mdcore · 20,562 bytesSKILL.mdcore · 20,562 bytesSKILL.mdcore · 20,562 bytesSKILL.mdcore · 20,562 bytesexamples/README.mddoc · 2,902 bytesexamples/sample-decoded-summary.jsonasset · 4,392 bytesexamples/sample-full-no-runtime-response.jsonasset · 28,289 bytesexamples/sample-succeeded-response.jsonasset · 1,767 bytesreferences/api-reference.mddoc · 2,535 bytesreferences/authentication.mddoc · 6,649 bytesreferences/error-handling.mddoc · 3,819 bytesreferences/violation-catalog.mddoc · 2,171 bytesscripts/build-zip.shruns · 3,524 bytesscripts/decode-report.jsruns · 16,785 bytesscripts/resolve-token.shruns · 7,322 bytesscripts/run-scan.shruns · 6,134 bytesscripts/scan.shruns · 3,823 bytesscripts/validate-token.jsruns · 5,455 bytes
Read excerpt
# ApexGuru Performance Scan Skill
## CRITICAL: Mandatory Script Usage
Every step — token resolution, zipping, API calls, and report decoding — MUST go
through the bundled scripts in `<skill_dir>/scripts/`. No exceptions.
### WRONG — never do this:
```bash
# WRONG: hand-rolled curl to the API
curl -X POST https://api.salesforce.com/... -F file=@x.zip
# WRONG: inline base64 + jq to read the report