skills.rest
auldsyababua
auldsyababuaCOMMUNITY
Explore all skills by this author →
GitHub

code-validation

Scan git diffs and staged files for code red flags with JSON findings.

6|1|Updated Nov 12, 2025
Search Tags:#security#pr#static-analysis#code-review#diff-analysis
One-click install
npx skills add https://github.com/auldsyababua/instructor-workflow --skill code-validation
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: code-validation
Source: https://github.com/auldsyababua/instructor-workflow/tree/main/skills/code-validation
Command: npx skills add https://github.com/auldsyababua/instructor-workflow --skill code-validation

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

Validates code changes through automated scanning and heuristics to detect test-disabling patterns, secrets, path portability issues, dangerous flags, large deletions, and broad dependency changes.

Core Features & Use Cases

  • Automated scanning of diffs for red flags during PR review.
  • Static analysis of staged changes and selected files.
  • JSON findings with severity and contextual information to guide remediation.

Quick Start

  • Compare branches: python scripts/diff_analyzer.py --base main --format json
  • Analyze staged changes: python scripts/static_analyzer.py ./src --format json

Frequently Asked Questions about code-validation

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automatically detect security issues and red flags in code changes?▼

Automated code validation scans diffs and staged files to detect red flags like test-disabling patterns, secrets, path portability issues, and dangerous flags. Use the diff analyzer or static analyzer scripts to produce structured JSON findings with severity and context for each issue.

Can I validate pull request diffs for secrets and dangerous code patterns?▼

Yes. Compare branches with the diff analyzer to scan pull request changes across Python, TypeScript, JavaScript, HTML, and CSS. It identifies secret exposure, large deletions, dependency changes, and other red flags in a structured JSON format for review.

What code patterns does static analysis detect in staged changes?▼

Static analysis detects test-disabling patterns, hardcoded secrets, non-portable paths, risky flags, suspicious deletions, and import or dependency changes. Results include category, severity, file location, line number, matched pattern, and remediation context.

Does code validation work with Python, TypeScript, and JavaScript projects?▼

Yes. The Skill supports Python, TypeScript, JavaScript, HTML, and CSS. Run the static analyzer against your source directory to scan staged or selected files in any of these languages.

How do I integrate code validation findings into my PR review workflow?▼

The analyzer outputs structured JSON findings with severity levels and contextual messages designed for integration into QA and security validation processes. Use the JSON output to automate review gates or feed results into downstream tools.

Related Skills

Explore More Software Engineering Skills→
theslashdojotheslashdojo

git-diff

Identify and review exact changes across git states with unified diff output.

Official
Advanced
Community-AccessCommunity-Access
387

report-generation

Generate document accessibility audit reports with severity scores and VPAT/ACR compliance exports.

Official
Intermediate
zangjeicyzangjeicy

requesting-code-review

Scan git diffs for security vulnerabilities and quality regressions.

Community
Advanced
zaiyemeiyou404zaiyemeiyou404

requesting-code-review

Automate code review with pre-commit security scans and quality checks.

Community
Advanced