Code Reviews (formerly Clayton) helps you stay up to date with the latest guidance from Salesforce through our seasonal rule releases. This time, we've added 5 new rules to help you with Winter '26 changes, and a further 10 to ensure that you're able to deliver secure, high quality agents with Agentforce.

Missing Apex documentation

Identifies missing documentation to help developers and agents understand the intention of the code.

Use of the lightning/uiGraphQLApi module

Use the newer graphql API which supports more features such as dynamic queries

Missing entry in Apex documentation

Identifies missing entry in Apex documentation. Better documentation can help developers and agents understand the intention for each method.

Invalid access modifier on abstract, override or virtual method

In Winter ‘26, it is now an error to make abstract, override or virtual methods private.

Use of deprecated instance URL

Using my domain URLs ensures that all links keep working even if Salesforce migrate your org to a different instance.
​

Excessive number of Agentforce topics

Checks that there aren’t too many topics on a single agent.

Incorrect Agentforce settings

Ensures Agentforce is configured for strong security, actionable feedback, and effective monitoring.

Insufficient length of instructions in Agentforce topic

Checks that there is enough information for Agentforce agents to be effective.

Missing customer verification in Agentforce agent

Detect if an agent has been configured without verifying the user’s identity.

Missing invocation target for Agentforce action

Checks that every invocation target for an Agentforce action exists.

Missing output assignment for Agentforce customer verification

Checks that even once you’re verifying a customer, that you are also using the verification result.
​
​Untested Agentforce action

Checks that all Agentforce actions have tests.

Untested Agentforce agent

Checks that all Agentforce agents have tests.

Untested Agentforce topic

Checks that all your Agentforce topics are tested.

Use of deprecated Agentforce secure actions

Detect if an agentforce agent uses deprecated actions

If you're a Code Reviews customer, you can find them in the 'Updates' section of your the app (https://app.clayton.io/store). If you're not yet a customer, reach out to our team via the in-app chat to get started!

Please don't hesitate to reach out our support team if you have any questions about this article.