{"id":"2365171e-89e","slug":"sf-guardian-the-apex-whisperer-guardian-aipowered-salesforce","claude_md":"# SF Guardian: The Apex Whisperer\n\n> Generated by [whycantwehaveanagentforthis.com](https://whycantwehaveanagentforthis.com/result/sf-guardian-the-apex-whisperer-guardian-aipowered-salesforce). Roasted, scored, ready to scaffold.\n\n## What you are building\n\n**Problem:** SF Guardian: AI-Powered Salesforce Code Review Assistant Problem: On any Salesforce project, developers ship Apex/LWC code containing well-known mistakes (SOQL queries inside loops, governor limit violations, missing tests, CRUD/FLS security gaps). Manual code reviews are time-consuming and often incomplete. Solution: Every Pull Request on GitHub is automatically analyzed by an AI agent (Claude Code) that: Reads the modified Apex/LWC files, Detects bad practices, Writes clear review comments\n\n**Verdict:** ACTUALLY NOT BAD — _\"You're building a linter for a platform that charges $150/user/month and still can't handle a JOIN.\"_\n\n**Summary:** A GitHub PR bot that uses Claude to review Apex and LWC code for Salesforce-specific anti-patterns — SOQL in loops, governor limit risks, FLS gaps, and missing test coverage — and posts actionable inline comments.\n\n## Agent-readiness score\n\nOverall: **58/100** (band C)\n\n| Dimension | Score | Why |\n|---|---|---|\n| Memory required | 22/25 | Some cross-session state — start with Redis, graduate to a vector store. |\n| Tool count | 9/25 | Crowded market: at least 9 integrations to compete. |\n| Policy surface | 10/25 | Mid-size policy surface — define refusal categories before launch. |\n| Eval coverage | 17/25 | Eval scaffolding doable — write 50 paired examples and grade with an LLM-as-judge. |\n\n> Worth building, but plan for the long-tail. SF Guardian: The Apex Whisperer needs runway, not just speed.\n\n## Suggested tools\n\n- fetch (HTTP GET on a URL allow-list)\n- search (Brave / Tavily / Exa for competitor research)\n- database (Postgres / Supabase for user state)\n- vector-store (embedding-based retrieval)\n- payments (Stripe checkout for premium tier)\n\n## Smoke evals\n\n- The agent introduces itself as \"SF Guardian: The Apex Whisperer\" and refuses tasks outside the stated scope.\n- Given the canonical problem (\"SF Guardian: AI-Powered Salesforce Code Review Assistant Problem: On any Salesfo\"), the agent produces a plan in ≤ 200 tokens.\n- When asked \"what's different from CodeScan (AutoRABIT)?\", the agent gives a concrete differentiator, not a marketing line.\n- When asked about Salesforce (Einstein for Developers)'s threat, the agent acknowledges the risk honestly.\n- No private personal data appears in any output (PII redaction smoke test).\n\n## Stack\n\n- Model: `claude-sonnet-4-6` (Anthropic). Override via `ANTHROPIC_MODEL` env.\n- Suggested stack: `Claude API (claude-opus-4-5 for reasoning, haiku for triage)`, `GitHub Apps API`, `sfdx-scanner/PMD as pre-filter`, `Node.js or Python FastAPI`, `Supabase for config/audit storage`\n- Solo build estimate: 6-10 weeks for a credible MVP with GitHub App integration, PMD baseline + Claude layer, and inline PR comments\n\n## Kill prediction\n\nSalesforce (Einstein for Developers) could obsolete this in 18-24 months. Salesforce expands Einstein for Developers from in-IDE autocomplete to PR-level review natively in GitHub Actions and Copilot for Salesforce. They already have the Apex AST, the org metadata context, and the distribution. You don't.\n\n**Survival strategy:** Go vertical into compliance — SOC2, HIPAA, PCI-DSS Salesforce implementations. Salesforce won't touch regulated-industry liability. Build audit trails, remediation workflows, and compliance report exports that a CISO will sign a $50k/yr contract for.\n\n## Hand-off\n\n- Read the full analysis: https://whycantwehaveanagentforthis.com/result/sf-guardian-the-apex-whisperer-guardian-aipowered-salesforce\n- Open in Anthropic Managed Agents: see the deeplink on the result page\n- Claim this idea: https://whycantwehaveanagentforthis.com/result/sf-guardian-the-apex-whisperer-guardian-aipowered-salesforce#claim\n\n## Build it with a human\n\nBook 20 min and we scope the fastest V0 you can ship — free, no signup: https://cal.com/sattyamjjain\n","scaffold_sh":"#!/usr/bin/env bash\n# Generated by whycantwehaveanagentforthis.com — F-N1 Build-this-with\n# Source: https://whycantwehaveanagentforthis.com/result/sf-guardian-the-apex-whisperer-guardian-aipowered-salesforce\n#\n# Bootstraps a starter repo for \"SF Guardian: The Apex Whisperer\" with a CLAUDE.md\n# pulled from this site. Idempotent: re-running on an existing\n# folder is a no-op. No network calls beyond the initial curl.\nset -euo pipefail\n\nFOLDER=\"${1:-sf-guardian-the-apex-whisperer}\"\nif [ -d \"$FOLDER\" ]; then\n echo \"Folder $FOLDER already exists. Aborting (idempotent).\"\n exit 0\nfi\nmkdir -p \"$FOLDER\"\ncd \"$FOLDER\"\n\n# Pull the live CLAUDE.md from the site.\ncurl --fail --silent --show-error -L \"https://whycantwehaveanagentforthis.com/api/bootstrap/2365171e-89e/raw\" -o CLAUDE.md\n\ncat > .gitignore <