What problem does it solve?
Misconfigured applications cause preventable outages, security breaches from leaked secrets, and inconsistent behavior across development, staging, and production environments. This Skill eliminates the risk of silent config failures, hardcoded credentials, and undocumented environment differences that lead to production incidents.
Core Features & Use Cases
- Schema Validation: Enforces fail-closed boot behavior by checking for missing required config, type mismatches, out-of-range values, and conflicting feature flags across all environments.
- Security & Secret Detection: Flags secrets hardcoded in plain config files, verifies secret manager references resolve correctly, and enforces secure defaults for production deployments.
- Parity & Drift Checks: Surfaces undocumented differences between environment configs and detects runtime config drift from declared values to eliminate "it works on my machine" failures.
Use Case: A team deploying a new SaaS feature can run this Skill to catch a missing DATABASE_URL env var in production, flag a hardcoded database password in production.yaml, and identify that cache.ttl is set in dev but missing in prod before the deploy goes live.
Quick Start
Ask the configuration-validator skill to scan your application's config files and environment variables for security risks, parity gaps, and runtime drift.
