salesloft-debug-bundle
Build a minimal redacted Salesloft escalation bundle with contract, auth-state, rate, timing, deployment, and API Logs evidence. Use when a failure needs support or engineering review. Trigger with "Salesloft debug bundle", "Salesloft support evidence", or "Salesloft diagnostics".
Allowed Tools
Provided by Plugin
salesloft-pack
Production Salesloft operator workflows for authentication, cadences, synchronization, rate control, webhooks, security, deployment, and incident evidence
Installation
This skill is included in the salesloft-pack plugin:
/plugin install salesloft-pack@claude-code-plugins-plus
Click to copy
Instructions
Salesloft Redacted Debug Bundle
Overview
This skill produces a small evidence package that another engineer can use without receiving credentials or customer records. It separates observed facts from hypotheses.
Prerequisites
- Incident ID, owner, timeframe, environment, and expected behavior
- Approved output directory and retention period
- Access to application logs and, when authorized, Salesloft API Logs
- A redaction review owner
Tool Discipline
Use Read, Glob, and Grep to locate bounded logs, configuration keys, and version files. Use WebFetch only for current official Salesloft documentation. Use Write or Edit only for the approved redacted artifact.
Current Contract
- Capture method and path template, status, content type, latency, attempt count, and deployment revision.
- Capture auth type, expiry state, scope names, and team alias, never credential values.
- Capture
x-ratelimit-endpoint-costandx-ratelimit-remaining-minutewhen present. - Salesloft API Logs can lag about five minutes and expose up to 10,000 calls or 14 days in the UI; absence is not immediate proof that no call occurred.
Authentication
Use existing approved access. The bundle must omit Authorization headers, refresh tokens, client secrets, API keys, callback tokens, cookies, raw bodies, and prospect fields.
Instructions
- Freeze incident scope, UTC window, environment, and affected operation.
- Collect only bounded application events for that window and correlation key.
- Add redacted configuration names, dependency versions, and deployment revision.
- Add response-envelope shape and rate metadata without record contents.
- If authorized, compare API Logs by integration, team, endpoint, time, and status after the documented lag.
- Scan the artifact for credential patterns and CRM fields, then record checksums.
- Require a second review before external sharing.
Approval Boundaries
Do not archive full environment dumps, databases, raw HTTP payloads, or unrestricted logs. External sharing requires named reviewer approval and an expiry date.
Output
Return bundle path, file inventory, redactions, checksums, evidence timeline, hypotheses, missing evidence, reviewer, and deletion date.
Error Handling
| Condition | Response |
|---|---|
| Secret scanner matches | Quarantine, remove the value, rotate if exposure is possible, and rebuild. |
| API Logs empty | Wait for documented lag and verify filters; do not infer no request. |
| Customer data present | Remove or aggregate it before the bundle leaves the system. |
| Evidence conflicts | Preserve both observations and label the discrepancy. |
Examples
The example below shows the minimum redacted evidence expected from a successful invocation of this operator workflow.
incident=SL-204; files=4; secret-findings=0; pii-findings=0; reviewer=pending