lg-shield

Detects Malaysian road hazards and speed controls crowdsourcedly.

1|1|Updated Feb 18, 2026
One-click install
npx skills add https://github.com/AshishYesale7/LGFlutterStarterKit --skill lg-shield
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: lg-shield
Source: https://github.com/AshishYesale7/LGFlutterStarterKit/tree/main/.agent/skills/lg-shield
Command: npx skills add https://github.com/AshishYesale7/LGFlutterStarterKit --skill lg-shield

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill acts as a critical guardrail, preventing security vulnerabilities and ensuring that the application's architecture and data flow adhere to defined standards, protecting against secrets leakage and layer violations.

Core Features & Use Cases

  • Secret Detection: Scans for hardcoded API keys, passwords, and sensitive credentials in various file types.
  • Repository Hygiene: Enforces rules for .gitignore and prevents committing large binary files.
  • Layer Boundary Validation: Ensures that code imports respect the defined architectural layers (e.g., no UI code directly calling network services).
  • Data Flow Integrity: Verifies that data follows the canonical pipeline from external APIs down to the LG Rig.
  • Dependency Audit: Checks for vulnerable packages and unnecessary permissions.
  • Use Case: Before deploying any changes, run lg-shield to automatically verify that no API keys have been accidentally committed and that the UI layer is not making direct network calls, ensuring a secure and maintainable codebase.

Quick Start

Run the shield scan to check for security issues and architectural violations.

Frequently Asked Questions about lg-shield

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I prevent hardcoded API keys and secret leakage in a Flutter application?

Secret leakage in a Flutter application is prevented by scanning various file types for hardcoded API keys, passwords, and sensitive credentials. Automated checks validate code changes against predefined rules before deployment.

How do I enforce architectural layer boundaries and stop UI code from calling network services directly?

Architectural layer boundaries are enforced by validating import chains against defined rules. This ensures UI code cannot directly call network services, maintaining separation of concerns and structural integrity.

Can I automatically check for vulnerable packages and dependency issues in my codebase?

You can automatically check for vulnerable packages and dependency issues by running a dependency audit. This process identifies vulnerable packages and flags unnecessary permissions within your project.

What is data flow integrity validation and how does it verify the pipeline from external APIs?

Data flow integrity validation verifies that data follows the canonical pipeline from external APIs down to the target environment. It ensures data moves correctly through defined architectural layers without bypassing boundaries.

Does this guardrail tool enforce repository hygiene rules like .gitignore configurations?

This guardrail tool enforces repository hygiene by validating .gitignore configurations and preventing the commitment of large binary files. It ensures sensitive data and unnecessary artifacts remain out of version control.