What problem does it solve?
Manual ColdFusion code reviews often miss critical security flaws like SQL injection, inconsistent variable scoping, or outdated coding patterns. This skill automates the validation process, ensuring your CFML applications are secure, performant, and maintainable.
Core Features & Use Cases
- Security Audits: Automatically checks for SQL injection vulnerabilities and enforces
cfqueryparam usage.
- Code Quality Enforcement: Validates variable scoping, component documentation, and promotes modern CFScript for logic.
- Use Case: Integrate this skill into your CI/CD pipeline to automatically scan all ColdFusion code for security risks and best practice violations before deployment, preventing common errors and ensuring compliance.
Quick Start
Install CFLint (primary validation tool):
npm install -g cflint
Then, validate your ColdFusion project:
cflint -folder /path/to/your/project -html -htmlfile report.html
This generates a detailed HTML report of all issues.