coldfusion-validator

Validate ColdFusion CFML code for syntax and security compliance via CFLint.

Updated Jan 23, 2025
One-click install
npx skills add https://github.com/ErnestPenaJr/Project-32 --skill coldfusion-validator
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: coldfusion-validator
Source: https://github.com/ErnestPenaJr/Project-32/tree/main/.claude/skils/coldfusion
Command: npx skills add https://github.com/ErnestPenaJr/Project-32 --skill coldfusion-validator

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires cflint, and includes references (resource) components.

What problem does it solve?

Manual ColdFusion code reviews often miss critical security flaws like SQL injection, inconsistent variable scoping, or outdated coding patterns. This skill automates the validation process, ensuring your CFML applications are secure, performant, and maintainable.

Core Features & Use Cases

  • Security Audits: Automatically checks for SQL injection vulnerabilities and enforces cfqueryparam usage.
  • Code Quality Enforcement: Validates variable scoping, component documentation, and promotes modern CFScript for logic.
  • Use Case: Integrate this skill into your CI/CD pipeline to automatically scan all ColdFusion code for security risks and best practice violations before deployment, preventing common errors and ensuring compliance.

Quick Start

Install CFLint (primary validation tool):

npm install -g cflint

Then, validate your ColdFusion project:

cflint -folder /path/to/your/project -html -htmlfile report.html

This generates a detailed HTML report of all issues.

Frequently Asked Questions about coldfusion-validator

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate ColdFusion code validation for security vulnerabilities?

ColdFusion code validation automatically scans CFML applications for security risks like SQL injection and enforces best practices such as cfqueryparam usage. This skill integrates CFLint-based analysis into your workflow, generating actionable reports with remediation guidance in JSON or HTML formats to catch vulnerabilities before deployment.

Can I check for SQL injection and cfqueryparam enforcement in ColdFusion projects?

Yes. This skill validates CFML code specifically for SQL injection prevention and cfqueryparam enforcement as part of comprehensive security audits. It applies configuration-driven rule sets via .cflintrc to ensure consistent protection across components, scripts, and REST services.

What code quality issues does ColdFusion validation catch?

ColdFusion validation checks variable scoping consistency, component documentation compliance, outdated coding patterns, and promotes modern CFScript for logic. It enforces maintainability standards across your entire CFML codebase to improve code health.

How do I integrate ColdFusion code validation into CI/CD pipelines?

Install CFLint globally via npm, then configure this skill to scan your ColdFusion project folder automatically during CI/CD workflows. It outputs detailed HTML or JSON reports identifying security risks and best practice violations before code reaches production.

Does ColdFusion validation work with existing CFLint configurations?

Yes. This skill applies configuration-driven validation processes via .cflintrc files, supporting custom rule sets for critical security and code-quality checks. Your existing CFLint configurations control which violations are flagged and how results are reported.

What's the difference between running CFLint directly versus using this validation skill?

This skill provides structured, security-focused validation with integrated remediation guidance, enforced rule sets for SQL injection and scoping, and streamlined report generation for CI/CD integration—going beyond raw CFLint output with actionable context for development teams.