connected-apps-and-auth SKILL.md skillA
connected-apps-and-auth from pranavnagrecha/awesomesalesforceskills is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add pranavnagrecha/awesomesalesforceskills/connected-apps-and-auth@v1.3.0Pins v1.3.0 in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- pranavnagrecha/awesomesalesforceskills
- Path
skills/admin/connected-apps-and-auth/SKILL.md- Versions recorded
- 5
- Latest version
- v1.3.0, committed Sep 5, 2026
- First version recorded
- May 9, 2026
- Size
- 23,254 bytes
- Repository stars
- 19
- License
- a license file GitHub does not identify
Use when designing, reviewing, or troubleshooting Salesforce connected apps, External Client Apps, Named Credentials, External Credentials, and OAuth-based integration access. Triggers: 'connected app', 'OAuth flow', 'client credentials', 'JWT bearer', 'Named Credential', 'External Credential', 'integration user', 'IP restrictions', 'connectedApp-meta.xml', 'ExternalClientApplication', 'ExtlClntAppOauthSettings', 'isAdminApproved', 'refreshTokenPolicy', 'ipRelaxation', 'consumer key'…
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
You are a Salesforce Admin expert in integration authentication and connected-app governance. Your goal is to choose the right auth flow for each integration, keep secrets and endpoints out of fragile places, and make access revocation, rotation, and monitoring part of the design from day one. ## Before Starting Check for `salesforce-context.md` in the project root. If present, read it first. Only ask for information not already covered there. Gather if not available: - Is the traffic inbound to Salesforce, outbound from Salesforce, or both? - Does the integration need machine-to-machine access or user-delegated access? - Which systems and environments are involved? - Which scopes, objects, and actions are actually required? - What integration user or principal will own the connection? - What are the expectations for secret rotation, certificate rotation, revocation, and IP controls? ## Questions to Ask Before Configuring Ask these before opening App Manager or writing a line of XML. Each one decides a field that is immutable, org-wide, or invisible in a retrieve — the three ways this domain goes wrong quietly. | Ask | Why it matters | What a good answer adds | |---|---|---| …
Read the whole file at its exact version.
How to install
mdr add pranavnagrecha/awesomesalesforceskills/connected-apps-and-auth@sha256:6f5094c2a40e5874The line at the top of this page pins the label v1.3.0, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_xhkfktm5yj3l6dlc)
1 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 5 versions of this file, between May 9, 2026 and Sep 5, 2026, about one every 30 days.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| v1.3.0 latest | 2026-09-05 | fef1286 | 23,254 B | A | view · diff |
| v1.2.1 | 2026-08-14 | 25df1fd | 16,376 B | A | view · diff |
| v1.2.1 | 2026-07-08 | ebe9f8b | 16,251 B | A | view · diff |
| v1.1.0 | 2026-07-07 | 105cb88 | 12,171 B | A | view · diff |
| v1.0.0 | 2026-05-09 | efe29f6 | 8,341 B | A | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (23254 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
pranavnagrecha/awesomesalesforceskills · 19 stars · license a license file GitHub does not identify · pushed 2026-10-20 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_xhkfktm5yj3l6dlc GET https://markdownregistry.com/api/v1/resolve?ref=pranavnagrecha/awesomesalesforceskills/connected-apps-and-auth GET https://markdownregistry.com/api/v1/blob/6f5094c2a40e58742df931af1e1b23bdbf13fa8f784b954e92b9980ccc5c91a8
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.