What problem does it solve?
This Skill acts as a critical guardrail, preventing security vulnerabilities and ensuring that the application's architecture and data flow adhere to defined standards, protecting against secrets leakage and layer violations.
Core Features & Use Cases
- Secret Detection: Scans for hardcoded API keys, passwords, and sensitive credentials in various file types.
- Repository Hygiene: Enforces rules for
.gitignore and prevents committing large binary files.
- Layer Boundary Validation: Ensures that code imports respect the defined architectural layers (e.g., no UI code directly calling network services).
- Data Flow Integrity: Verifies that data follows the canonical pipeline from external APIs down to the LG Rig.
- Dependency Audit: Checks for vulnerable packages and unnecessary permissions.
- Use Case: Before deploying any changes, run
lg-shield to automatically verify that no API keys have been accidentally committed and that the UI layer is not making direct network calls, ensuring a secure and maintainable codebase.
Quick Start
Run the shield scan to check for security issues and architectural violations.