From vanguard-frontier-agentic
Assigns standardized Salesforce matter type (org-config, automation, code, etc.), risk tier (Critical/High/Medium/Low/Unknown), and escalation gate before routing or handoff.
How this skill is triggered — by the user, by Claude, or both
Slash command
/vanguard-frontier-agentic:salesforce-risk-taxonomyThis skill is limited to the following tools:
The summary Claude sees in its skill listing — used to decide when to auto-load this skill
This skill provides the shared vocabulary for classifying Salesforce matters by
This skill provides the shared vocabulary for classifying Salesforce matters by type, risk tier, and escalation gate. It exists so that all Salesforce specialist agents use consistent terminology when they classify, route, hand off, and escalate matters. It does not assess compliance, give Salesforce advice, or authorize any action.
salesforce-routing-protocol.salesforce-case-capsule.salesforce-live-change-approval-protocol.salesforce-data-exposure-escalation-protocol.| Matter type | Description |
|---|---|
org-config | Org settings, custom settings, custom metadata, sandboxes, licenses |
automation | Flow, approval processes, validation rules, Process Builder |
| , assignment rules | |
code | Apex, LWC, triggers, async jobs, static resources, packages |
integration | REST/SOAP/Bulk/Streaming APIs, Platform Events |
| , CDC, MuleSoft | |
| , middleware | |
security-iam | Permission sets, profiles, sharing rules, OWD, role hierarchy, guest users, OAuth, Shield |
data | Data quality, data migration, data archival, retention policies, data classification |
sales-cpq | CPQ |
| pricing, quoting, product catalog, Revenue Cloud | |
| , order management | |
service-sla | Service Cloud |
| entitlements, SLAs, case management, omni-channel | |
experience-cloud | Experience Cloud |
| sites, guest-user access, sharing sets, digital experiences | |
marketing-consent | Marketing Cloud |
| , Account Engagement | |
| , consent capture, preference centers, Data Cloud | |
agentforce-ai | Agentforce |
| configuration, Einstein | |
| features, AI grounding, autonomous actions | |
analytics-metrics | Reports, dashboards, CRM Analytics |
| , Tableau | |
| , metric definitions | |
slack-governance | Slack |
| integration, workspace governance, Slack-Salesforce data flows | |
industry-vertical | Health Cloud |
| , Financial Services Cloud | |
| , Government Cloud | |
| , regulated-vertical configuration | |
architecture | Org strategy, multi-org topology, data model design, platform limits |
compliance | Audit requirements, BAA/DPA obligations, regulatory mapping, evidence collection |
release-deploy | Change sets, DX packages, CI/CD pipelines, destructive changes, sandbox refresh |
live-mutation | Any proposed change to a production org; always triggers live-change-approval-protocol |
| Tier | Definition | Default action |
|---|---|---|
| Critical | Production data at imminent risk; irreversible action without approval; regulatory breach likely; autonomous AI action beyond boundary | Immediate stop; escalate; do not proceed without human authorization |
| High | Significant production impact; non-trivial rollback; affects regulated data, revenue logic, or broad permissions | Pause; require documented approval; dual-agent review recommended |
| Medium | Controlled-environment risk; reversible; affects limited scope; no regulated data | Proceed with review; log rationale; single specialist sufficient |
| Low | Sandboxed, non-production, or purely advisory; no data exposure; fully reversible | Proceed with standard review; document findings |
| Unknown | Jurisdiction, scope, data sensitivity, or counterparty identity is missing or ambiguous | Treat as High; gather evidence before reclassifying |
Rule: Unknown must never be reclassified to Low without documented evidence. When in doubt, escalate.
An escalation gate, when fired, requires the matter to pause and be reviewed by a named human owner before any agent takes further action. Gates are not advisory — they are hard stops.
| Gate | Fires when |
|---|---|
production-data-exposure | Any configuration, automation, or code change that could expose production records to unauthorized parties; guest-user OWD widening; sharing rule expansion on PII objects |
guest-user-expansion | Experience Cloud |
| guest-user profile changes; sharing set modifications; public-site access widening | |
autonomous-ai-action | Agentforce |
| agent action allowlist expansion; unsupervised AI write-back to production records; AI model scope exceeding review boundary | |
finance-revenue-logic | Changes to CPQ |
| pricing rules, revenue recognition logic, billing integration, order management, or financial reporting fields | |
regulated-vertical | Changes to Health Cloud |
| , Financial Services Cloud | |
| , or Government Cloud | |
| orgs; HIPAA, PCI, FINRA, or FedRAMP scope | |
mass-change | Bulk permission assignment; data loader operations on > configurable threshold records; mass automation activation; org-wide setting change affecting all users |
irreversible-deploy | Deployment of destructive changes (destructiveChanges.xml); field or object deletion; package uninstall; irreversible metadata removal |
matter_type values from the table above.risk_tier using the tier definitions; default Unknown if evidence is missing.matter_type: [one or more from the table]
risk_tier: Critical | High | Medium | Low | Unknown
escalation_gates_fired: [list, or "none"]
rationale: [one paragraph, evidence-based]
missing_evidence: [what would change the classification]
npx claudepluginhub raishin/vanguard-frontier-agentic --plugin vanguard-frontier-agenticClassifies and routes Salesforce matters to specialist agents, handles cross-domain overlap, and resolves agent conflicts. Use when a Salesforce issue needs triage or parallel review.
Identifies, assesses, and mitigates operational risks for projects, processes, or decisions using a risk matrix, categories, and register format. Outputs prioritized actionable mitigations.
Classifies AI use cases against a registry as approved, conditional, or not approved, with conditions and next steps. Flags handoffs to privacy or product counsel.