Kong 配置验证

Validate Kong plugin presence and rate-limiting configurations across environments.

Updated Aug 23, 2026
One-click install
npx skills add https://github.com/sandwichlab-ai/sandwichlab-skills --skill kong
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: Kong 配置验证
Source: https://github.com/sandwichlab-ai/sandwichlab-skills/tree/main/skills/kong-validate
Command: npx skills add https://github.com/sandwichlab-ai/sandwichlab-skills --skill kong

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill validates Kong configuration files to ensure every service has the required authentication and/or rate-limiting plugins, preventing security gaps caused by missing plugins.

Core Features & Use Cases

  • Validate that services have appropriate plugins according to type (JWT + CORS for API services, key-auth for key-based services, etc.).
  • Verify rate-limiting configurations when policy is redis and ensure redis details are provided.
  • Detect and report environment-wide inconsistencies across dev/preprod/prod and provide remediation guidance.

Quick Start

Run the /kong-validate command to verify Kong configurations across all environments.

Frequently Asked Questions about Kong 配置验证

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I validate Kong configuration files for missing plugins?

Validating Kong configuration files involves checking that every service has the required authentication and rate-limiting plugins. This skill detects missing or misconfigured plugins across dev, preprod, and prod environments to prevent insecure API gateway configurations.

How do I verify Kong rate-limiting configurations using redis?

Verifying Kong rate-limiting configurations requires checking that when the policy is set to redis, all necessary redis connection details are provided. This skill validates field completeness for redis-based rate-limiting plugin configurations.

What plugins are required for different Kong API services?

Required Kong plugins depend on the service type, such as JWT and CORS for API services, or key-auth for key-based services. This skill validates plugin presence rules to ensure services have appropriate authentication and access controls.

Can I detect environment-wide Kong configuration inconsistencies across dev, preprod, and prod?

Detecting environment-wide Kong configuration inconsistencies is possible by scanning services across dev, preprod, and prod. This skill identifies missing or misconfigured plugins and provides remediation guidance for environment-wide alignment.

How do I check if Kong services have correct authentication and access controls?

Checking Kong services for correct authentication and access controls involves validating plugin presence rules and field completeness, including SM secret references. This skill identifies insecure configurations and ensures required plugins are applied.