integration-connectivity-generate: Salesforce Integration Patterns Expert
Use this skill when the user needs integration architecture and runtime plumbing: Named Credentials, External Credentials, External Services, REST/SOAP callout patterns, Platform Events, CDC, and event-driven integration design.
When This Skill Owns the Task
Use integration-connectivity-generate when the work involves:
.namedCredential-meta.xml or External Credential metadata
- outbound REST/SOAP callouts
- External Service registration from OpenAPI specs
- Platform Events, CDC, and event-driven architecture
- choosing sync vs async integration patterns
Delegate elsewhere when the user is:
Required Context to Gather First
Ask for or infer:
- integration style: outbound callout, inbound event, External Service, CDC, platform event
- auth method
- sync vs async requirement
- system endpoint / spec details
- rate limits, retry expectations, and failure tolerance
- whether this is net-new design or repair of an existing integration
Recommended Workflow
1. Choose the integration pattern
| Need |
Default pattern |
| authenticated outbound API call |
Named Credential / External Credential + Apex or Flow |
| spec-driven API client |
External Service |
| trigger-originated callout |
async callout pattern |
| decoupled event publishing |
Platform Events |
| change-stream consumption |
CDC |
2. Choose the auth model
Prefer secure runtime-managed auth:
- Named Credentials / External Credentials
- OAuth or JWT via the right credential model
- no hardcoded secrets in code
3. Generate from the right templates
Use the provided assets under:
assets/named-credentials/
assets/external-credentials/
assets/external-services/
assets/callouts/
assets/platform-events/
assets/cdc/
assets/soap/
4. Validate operational safety
Check:
- timeout and retry handling
- async strategy for trigger-originated work
- logging / observability
- event retention and subscriber implications
5. Hand off deployment or implementation details
Use:
High-Signal Rules
- never hardcode credentials
- do not do synchronous callouts from triggers
- define timeout behavior explicitly
- plan retries for transient failures
- use middleware / event-driven patterns when outbound volume is high
- prefer External Credentials architecture for new development when supported
Common anti-patterns:
- sync trigger callouts
- no retry or dead-letter strategy
- no request/response logging
- mixing auth setup responsibilities with runtime integration design
Output Format
When finishing, report in this order:
- Integration pattern chosen
- Auth model chosen
- Files created or updated
- Operational safeguards
- Deployment / testing next step
Suggested shape:
Integration: <summary>
Pattern: <named credential / external service / event / cdc / callout>
Files: <paths>
Safety: <timeouts, retries, async, logging>
Next step: <deploy, register, test, or implement>
Cross-Skill Integration
Reference Map
Start here
- references/named-credentials-guide.md
- references/external-services-guide.md
- references/callout-patterns.md
- references/rest-callout-patterns.md
- references/security-best-practices.md
Event-driven / platform patterns
- references/event-patterns.md
- references/platform-events-guide.md
- references/cdc-guide.md
- references/event-driven-architecture-guide.md
- references/messaging-api-v2.md
CLI / automation / scoring
- references/cli-reference.md
- references/named-credentials-automation.md
- references/scoring-rubric.md
- scripts/README.md — automation scripts overview (configure-named-credential.sh, set-api-credential.sh)
Asset templates
assets/named-credentials/ — Named Credential XML templates (OAuth, JWT, Certificate, Custom auth)
assets/external-credentials/ — External Credential XML templates (OAuth, JWT)
assets/external-services/ — External Service registration template and operations guide
assets/callouts/ — REST sync, Queueable, retry handler, and HTTP response handler Apex templates
assets/platform-events/ — Platform Event definition, publisher, and subscriber templates
assets/cdc/ — CDC handler and subscriber trigger templates
assets/soap/ — SOAP callout service template and wsdl2apex guide
assets/endpoint-security/ — Remote Site Setting and CSP Trusted Site XML templates
Automation hooks
scripts/suggest_credential_setup.py — auto-suggests credential configuration steps when integration files are detected
scripts/validate_integration.py — validates integration patterns before agent responses
Output Expectations
When this skill completes an integration task, it produces:
- Credential metadata — one or more files in
assets/named-credentials/ or assets/external-credentials/ filled with org-specific values
- Callout Apex class — a
.cls file using the Named Credential pattern, with async/sync pattern chosen based on context
- Event/CDC artifacts — Platform Event
.object-meta.xml, subscriber trigger, or CDC config (when event-driven pattern is chosen)
- Endpoint security metadata — Remote Site Setting and/or CSP Trusted Site XML files
- Scoring report — 120-point score across 6 categories (Security, Error Handling, Bulkification, Architecture, Best Practices, Documentation)
- Next step — a deployment or testing instruction for the generated artifacts
Score Guide
| Score |
Meaning |
| 108+ |
strong production-ready integration design |
| 90–107 |
good design with some hardening left |
| 72–89 |
workable but needs architectural review |
| < 72 |
unsafe / incomplete for deployment |
Pre-Delivery Checklist
1---
2name: integration-connectivity-generate
3description: "Salesforce integration architecture and runtime plumbing with 120-point scoring. Use this skill to set up Named Credentials, External Credentials, External Services, REST/SOAP callout patterns, Platform Events, and Change Data Capture. TRIGGER when: user sets up Named Credentials, External Services, REST/SOAP callouts, Platform Events, CDC, or touches .namedCredential-meta.xml files. DO NOT TRIGGER when: Connected App/OAuth config (use integration-connectivity-connected-app-configure), Apex-only logic (use platform-apex-generate), data import/export (use platform-data-manage), or CDC channel-membership metadata such as PlatformEventChannel, PlatformEventChannelMember, or EnrichedField (use integration-eventing-cdc-configure)."
4metadata:
5 version: "1.1"
6 domains: ["Integration"]
7 minApiVersion: "61.0"
8 relatedSkills:
9 - "agentforce-generate"
10 - "automation-flow-generate"
11 - "integration-connectivity-connected-app-configure"
12 - "integration-eventing-cdc-configure"
13 - "platform-apex-generate"
14 - "platform-data-manage"
15 - "platform-metadata-deploy"
16 cliTools:
17 - tool: ["jq"]
18 semver: ">=1.6.0"
19 - tool: ["npm"]
20 semver: ">=9.0.0"
21 - tool: ["python3"]
22 semver: ">=3.10.0"
23 - tool: ["sf"]
24 semver: ">=2.0.0"
25---
26
27# integration-connectivity-generate: Salesforce Integration Patterns Expert
28
29Use this skill when the user needs **integration architecture and runtime plumbing**: Named Credentials, External Credentials, External Services, REST/SOAP callout patterns, Platform Events, CDC, and event-driven integration design.
30
31## When This Skill Owns the Task
32
33Use `integration-connectivity-generate` when the work involves:
34- `.namedCredential-meta.xml` or External Credential metadata
35- outbound REST/SOAP callouts
36- External Service registration from OpenAPI specs
37- Platform Events, CDC, and event-driven architecture
38- choosing sync vs async integration patterns
39
40Delegate elsewhere when the user is:
41- configuring the OAuth app itself → [integration-connectivity-connected-app-configure](../integration-connectivity-connected-app-configure/SKILL.md)
42- writing Apex-only business logic → [platform-apex-generate](../platform-apex-generate/SKILL.md)
43- deploying metadata → [platform-metadata-deploy](../platform-metadata-deploy/SKILL.md)
44- importing/exporting data → [platform-data-manage](../platform-data-manage/SKILL.md)
45
46---
47
48## Required Context to Gather First
49
50Ask for or infer:
51- integration style: outbound callout, inbound event, External Service, CDC, platform event
52- auth method
53- sync vs async requirement
54- system endpoint / spec details
55- rate limits, retry expectations, and failure tolerance
56- whether this is net-new design or repair of an existing integration
57
58---
59
60## Recommended Workflow
61
62### 1. Choose the integration pattern
63| Need | Default pattern |
64|---|---|
65| authenticated outbound API call | Named Credential / External Credential + Apex or Flow |
66| spec-driven API client | External Service |
67| trigger-originated callout | async callout pattern |
68| decoupled event publishing | Platform Events |
69| change-stream consumption | CDC |
70
71### 2. Choose the auth model
72Prefer secure runtime-managed auth:
73- Named Credentials / External Credentials
74- OAuth or JWT via the right credential model
75- no hardcoded secrets in code
76
77### 3. Generate from the right templates
78Use the provided assets under:
79- `assets/named-credentials/`
80- `assets/external-credentials/`
81- `assets/external-services/`
82- `assets/callouts/`
83- `assets/platform-events/`
84- `assets/cdc/`
85- `assets/soap/`
86
87### 4. Validate operational safety
88Check:
89- timeout and retry handling
90- async strategy for trigger-originated work
91- logging / observability
92- event retention and subscriber implications
93
94### 5. Hand off deployment or implementation details
95Use:
96- [platform-metadata-deploy](../platform-metadata-deploy/SKILL.md) for deployment
97- [platform-apex-generate](../platform-apex-generate/SKILL.md) for deeper service / retry code
98- [automation-flow-generate](../automation-flow-generate/SKILL.md) for declarative HTTP callout orchestration
99
100---
101
102## High-Signal Rules
103
104- never hardcode credentials
105- do not do synchronous callouts from triggers
106- define timeout behavior explicitly
107- plan retries for transient failures
108- use middleware / event-driven patterns when outbound volume is high
109- prefer External Credentials architecture for new development when supported
110
111Common anti-patterns:
112- sync trigger callouts
113- no retry or dead-letter strategy
114- no request/response logging
115- mixing auth setup responsibilities with runtime integration design
116
117---
118
119## Output Format
120
121When finishing, report in this order:
1221. **Integration pattern chosen**
1232. **Auth model chosen**
1243. **Files created or updated**
1254. **Operational safeguards**
1265. **Deployment / testing next step**
127
128Suggested shape:
129
130```text
131Integration: <summary>
132Pattern: <named credential / external service / event / cdc / callout>
133Files: <paths>
134Safety: <timeouts, retries, async, logging>
135Next step: <deploy, register, test, or implement>
136```
137
138---
139
140## Cross-Skill Integration
141
142| Need | Delegate to | Reason |
143|---|---|---|
144| OAuth app setup | [integration-connectivity-connected-app-configure](../integration-connectivity-connected-app-configure/SKILL.md) | consumer key / cert / app config |
145| advanced callout service code | [platform-apex-generate](../platform-apex-generate/SKILL.md) | Apex implementation |
146| declarative HTTP callout / Flow wrapper | [automation-flow-generate](../automation-flow-generate/SKILL.md) | Flow orchestration |
147| deploy integration metadata | [platform-metadata-deploy](../platform-metadata-deploy/SKILL.md) | validation and rollout |
148| use integration from Agentforce | [agentforce-generate](../agentforce-generate/SKILL.md) | agent action composition |
149
150---
151
152## Reference Map
153
154### Start here
155- [references/named-credentials-guide.md](references/named-credentials-guide.md)
156- [references/external-services-guide.md](references/external-services-guide.md)
157- [references/callout-patterns.md](references/callout-patterns.md)
158- [references/rest-callout-patterns.md](references/rest-callout-patterns.md)
159- [references/security-best-practices.md](references/security-best-practices.md)
160
161### Event-driven / platform patterns
162- [references/event-patterns.md](references/event-patterns.md)
163- [references/platform-events-guide.md](references/platform-events-guide.md)
164- [references/cdc-guide.md](references/cdc-guide.md)
165- [references/event-driven-architecture-guide.md](references/event-driven-architecture-guide.md)
166- [references/messaging-api-v2.md](references/messaging-api-v2.md)
167
168### CLI / automation / scoring
169- [references/cli-reference.md](references/cli-reference.md)
170- [references/named-credentials-automation.md](references/named-credentials-automation.md)
171- [references/scoring-rubric.md](references/scoring-rubric.md)
172- [scripts/README.md](scripts/README.md) — automation scripts overview (configure-named-credential.sh, set-api-credential.sh)
173
174### Asset templates
175- `assets/named-credentials/` — Named Credential XML templates (OAuth, JWT, Certificate, Custom auth)
176- `assets/external-credentials/` — External Credential XML templates (OAuth, JWT)
177- `assets/external-services/` — External Service registration template and operations guide
178- `assets/callouts/` — REST sync, Queueable, retry handler, and HTTP response handler Apex templates
179- `assets/platform-events/` — Platform Event definition, publisher, and subscriber templates
180- `assets/cdc/` — CDC handler and subscriber trigger templates
181- `assets/soap/` — SOAP callout service template and wsdl2apex guide
182- `assets/endpoint-security/` — Remote Site Setting and CSP Trusted Site XML templates
183
184### Automation hooks
185- `scripts/suggest_credential_setup.py` — auto-suggests credential configuration steps when integration files are detected
186- `scripts/validate_integration.py` — validates integration patterns before agent responses
187
188---
189
190## Output Expectations
191
192When this skill completes an integration task, it produces:
193
1941. **Credential metadata** — one or more files in `assets/named-credentials/` or `assets/external-credentials/` filled with org-specific values
1952. **Callout Apex class** — a `.cls` file using the Named Credential pattern, with async/sync pattern chosen based on context
1963. **Event/CDC artifacts** — Platform Event `.object-meta.xml`, subscriber trigger, or CDC config (when event-driven pattern is chosen)
1974. **Endpoint security metadata** — Remote Site Setting and/or CSP Trusted Site XML files
1985. **Scoring report** — 120-point score across 6 categories (Security, Error Handling, Bulkification, Architecture, Best Practices, Documentation)
1996. **Next step** — a deployment or testing instruction for the generated artifacts
200
201---
202
203## Score Guide
204
205| Score | Meaning |
206|---|---|
207| 108+ | strong production-ready integration design |
208| 90–107 | good design with some hardening left |
209| 72–89 | workable but needs architectural review |
210| < 72 | unsafe / incomplete for deployment |
211
212---
213
214## Pre-Delivery Checklist
215
216- [ ] Never hardcode credentials — all secrets stored in Named Credentials or External Credentials