{
  "id": "salesforce-zero-trust-maturity-skill",
  "name": "Salesforce Zero Trust Maturity Skill",
  "type": "skill",
  "provider": "salesforce",
  "harnesses": ["codex", "claude-code", "cursor", "gemini", "kiro", "other"],
  "summary": "Evaluates Salesforce deployment zero-trust readiness against NIST SP 800-207 ZTA principles, scoring five pillars (User, Device, Network, Application, Automation) and reviewing continuous verification, certificate lifecycle, mTLS enforcement, Transaction Security Policies, and Event Monitoring coverage.",
  "source_type": "original",
  "official_docs": [
    "https://help.salesforce.com/s/articleView?id=sf.security_keys_about.htm",
    "https://help.salesforce.com/s/articleView?id=sf.transaction_security_policy_events.htm",
    "https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-207.pdf"
  ],
  "security_notes": "Read-only static review; sanitized inputs only; never requests live org credentials, session tokens, or API access. Risk register is advisory; remediation requires human authorization.",
  "last_verified": "2026-05-21",
  "path": "skills/salesforce/salesforce-zero-trust-maturity-skill",
  "author": "github: VincentChuWaiChow",
  "version": "0.1.0"
}