consumer-goods-tpe-dashboard-custom-kpi-configure
Customize the Trade Promotion Effectiveness (TPE) Analytics dashboards' generic KPI slots (Promotion Measure 1-3, Tactic Measure 1-2) with customer-…
它会碰到什么
逐条看命中(2 条严重或高危)
- 高
scripts/clone-tpe-dashboards.js:286exec-spawnconst { execFileSync } = require('child_process'); - 高
scripts/sf-rest.js:40exec-spawnconst { execFileSync } = require('child_process');
这一栏是扫描器报的事实,不是结论。命中多不等于有毒(安全工具、规则库、示例脚本本来就会包含危险写法),命中少也不等于干净。它和你手上的凭据、文件、网络有什么关系,需要你自己看。
技能内容
Customize TPE Dashboard KPIs
Headlessly clones the base TPE Analytics semantic-model parameters, visualizations, and dashboards
under a customer-chosen suffix, so a customer's own KPI measure codes appear on the Promotion/Tactic
Analysis dashboards without ever mutating the shipped base model. Driven entirely by sf CLI +
REST against an already-authenticated org. Requires consumer-goods-tpe-dashboard-configure to
have already installed the TPE Analytics app and the Extended TPM Analytics SDM — this skill never
installs those, only customizes on top of them.
Persona: a Salesforce TPM System Admin customizing TPE dashboards for their org's own KPIs.
There is no native "clone" endpoint for any of the three artifact types this skill touches
(semantic-model parameters, visualizations, dashboards) — every clone is the same three-step
pattern: GET the base artifact, deep-copy its JSON and apply overrides, POST the copy as
a new artifact. Base-model artifacts are never mutated in place.
The 5 KPI slots — two artifacts per slot, not one
The shipped Extended TPM Analytics SDM exposes 5 generic List-type parameters that the standard
dashboards bind to: Promotion Measure 1-3 (Promotion_Measure_{1,2,3}_prm / _value) and Tactic
Measure 1-2 (Tactic_Measure_{1,2}_prm / _clc). **Never assume Tactic mirrors Promotion's
_value naming** — resolve both slots' measurement apiNames from the live model per slot, never by
pattern. See references/payload-shapes.md for the confirmed apiNames and JSON shapes.
Each slot is two SDM artifacts: the parameter (*_prm, a List type with allowedValues
menu entries and a defaultValue) and the calculated measurement (what visualizations actually
query; its expression links back to the parameter by apiName). **Customizing a slot means cloning
both** — the parameter gets the customer's KPI as a new/selected allowedValues entry, and the
measurement's expression is rewritten to reference the cloned parameter's new apiName.
This skill always produces clones of all 5 slots (10 artifacts), whether or not a given slot has
a requested override — an unmentioned slot is still cloned as an exact copy of the base artifacts
(only apiName/label suffixed).
Two override modes per slot (see references/procedure.md for exact --overrides shapes):
- APPEND mode (default): upserts one
{measureCode, displayName}entry into the base menu by
measure code — same code relabels in place, new code appends.
- REPLACE mode: a full
allowedValuesarray supplied by the customer becomes the entire menu.
Either way this skill assumes the underlying measure data is already populated by prior
setup-rtr-datacloud-export/data-kit setup — it does not create that underlying data itself.
Inputs to collect first
Ask before starting. Do not guess.
- TPM System Admin username — verify connectivity via
node ./scripts/sf-rest.js org-status --target-org <username> (never sf org display --json
directly — that leaks a live accessToken). Non-Connected ⇒ stop, ask the user to log in.
- Dry-run? — offer by default.
- Suffix — distinguishes cloned metadata from the base model (e.g.
Cust). SuggestCustas a
default. Applied to every new artifact's API name/label — never reuse a base-model API name.
- Per-measure overrides — walk the customer through the 5 measures via
AskUserQuestion,
batched by dashboard (Promotion Measure 1-3 in one call, Tactic Measure 1-2 in a second call —
never all 5 in one call, the tool caps at 4 questions per call), never using the internal term
"slot" toward the user. **Never ask a separate plain free-text follow-up question to collect the
list** — a plain-text message doesn't block the next tool call, so if you fire another
AskUserQuestion for the next measure before the customer's reply lands, their answer races
ahead and lands on the wrong question. Instead, collect the full list **inside the same blocking
question**: every AskUserQuestion question automatically gets a "Type Something" free-text
option appended after your listed options — no need to add your own placeholder option for it,
and never rely on a bare canned option label (e.g. "Replace with custom list") to actually carry
the list, since selecting it only returns that label text, not the customer's data. Word the
question and its second option's description to point the customer at "Type Something"
explicitly, e.g. option 2 = "Replace with custom list", description: "Select Type Something
(last option, below) and type comma-separated {measureCode}: {displayName} pairs, plus which
one should be default." **A menu can have more than one entry — always collect the full array,
never just one pair** (a single-pair answer is still an array of length 1). This collected array
maps directly to that slot's REPLACE-mode override (`{"allowedValues":[...], "defaultValue":
"<first displayName unless the customer says otherwise>"}) — see references/procedure.md`'s
override-mode shapes. Confirm the resolved list per measure back to the user before Phase 0.
- Which dashboards to produce — Promotion Analysis, Tactic Analysis, or both. Default to both
if any measure on either has an override; otherwise ask explicitly.
How it works — phase list
- Namespace detection — resolve
NSviasf package installed listfor consistency with
sibling skills, but never apply it to any /services/data/... path (those are never namespaced).
- Phase 0 — Preflight & discovery: verify connectivity, pin API version
v67.0, resolve the
installed app + asset ids (model, both dashboards, visualizations) by walking the app's asset
list — never hardcode an id. Block with a pointer to consumer-goods-tpe-dashboard-configure if
prerequisites are missing. Full detail: references/procedure.md.
- Phase 1 — Resolve the 5-slot plan: deep-copy each base parameter/measurement with overrides
applied, print the plan, get explicit user confirmation before any writes.
- Phases 2-4 — Clone parameters, measurements, visualizations, dashboards: run
scripts/clone-tpe-dashboards.js (preferred over hand-rolling individual REST calls) — see
references/procedure.md for the full CLI usage, override-mode payload shapes, and every
real-write gotcha the script encodes (label uniqueness, dataSource .type stripping rules,
cloning every KPI-bound visualization not just one "designated" viz, cosmetic label-text
replacement, upsert-by-measure-code).
- Phase 5 — Verify: GET every created artifact back and confirm parameters, measurements,
visualizations, and dashboards all correctly reference the new suffixed clones, never a base
apiName. Full detail: references/procedure.md.
Key rules (see references/procedure.md for the complete list)
- Never mutate a base-model artifact — every write is a new POST of a suffixed copy.
- Never create anything without explicit user go-ahead on the Phase 1 plan.
- Always produce all 5 slots' worth of clones, even with zero overrides.
- Never leave a cloned measurement's
expressionreferencing a base parameter apiName. - Never hardcode an artifact id, api-name, or namespace across orgs.
- Never assume only one visualization per dashboard needs cloning — clone every widget whose viz
references a slot measurement.
Reference map
| Topic | File |
|---|---|
| Full phase-by-phase procedure, script CLI usage, all real-write gotchas, complete Rules list | references/procedure.md |
| Confirmed live JSON shapes for parameters, calculated measurements, visualizations, dashboards, and POST body shapes for all 4 create endpoints | references/payload-shapes.md |
| Org REST helper (strips accessToken; org-status subcommand) | scripts/sf-rest.js |
| Deterministic driver for Phases 2-4 | scripts/clone-tpe-dashboards.js |
Report
At the end of a run, give the user a structured status per phase (0-5): pass / blocked / pending,
with the specific blocking reason where applicable, and the final list of created artifacts (slot →
new parameter, base viz → new viz, base dashboard → new dashboard). Call out anything skipped due
to dry-run or a declined confirmation.
When invoked via delegation (the calling skill used the Skill tool to reach this file, rather
than the user directly — e.g. consumer-goods-tpe-dashboard-configure's customization step): this
report is an intermediate result. Return it to the calling skill and let it continue with its own
report — do not present this as the final answer to the user unless this skill was invoked
standalone.
想直接用这个技能?
本站把开放许可(MIT / Apache 等)的技能按仓库打包整理到网盘,点一下转存到你自己的网盘,不用一个个从 GitHub 拉。许可未声明的技能只给原始仓库链接,不打包。
它属于哪个仓库
skills/consumer-goods-tpe-dashboard-custom-kpi-configure/SKILL.md同一个仓库里的其他技能
- commerce-b2b-open-code-components-integrate
- commerce-b2b-open-code-components-replace
- dx-devops-conflict-resolve
- dx-devops-pipeline-manage
- dx-devops-test-failures-analyze
- dx-devops-test-pipeline-configure
- dx-devops-test-suite-assignments-configure
- dx-devops-test-suite-run
- dx-devops-work-item-manage
- dx-app-analytics-query
- platform-agentexchange-partner-offers-configure
- automation-sandbox-post-copy-config-generate