product-validator

Scans Team Lead products for security, path, and style issues.

16|12|Updated Apr 3, 2026
One-click install
npx skills add https://github.com/AlekseiUL/heisenberg-team --skill product-validator-alekseiul
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: product-validator
Source: https://github.com/AlekseiUL/heisenberg-team/tree/main/skills/product-validator
Command: npx skills add https://github.com/AlekseiUL/heisenberg-team --skill product-validator-alekseiul

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires yaml, and includes scripts (resource) components.

What problem does it solve?

Automates pre-review checks for Team Lead products by catching security leaks, unsafe paths, and common formatting/structure issues before anything is handed over for review.

Core Features & Use Cases

  • Security and secrets scanning: Detects personal data markers (names, IDs, addresses, phones, usernames) and token-like strings in skill/material/GitHub files.
  • Path and style linting: Flags absolute paths (e.g., /Users/... /home/... /root/) and style problems like long/medium dashes (—/–).
  • Type-specific validation:
    • Skill: Validates SKILL.md YAML frontmatter (requires name/description), checks triggers presence, size limits, and optional references integrity.
    • Group material: Verifies expected dual format patterns (MD + PDF + AGENT.md) and required section headers.
    • GitHub project: Confirms presence of core documentation files like README.md and recommends LICENSE/INSTALL/.gitignore.
  • Use cases: Use it in a pipeline step to reduce manual grep/review time and improve consistency across skills and submissions.

Quick Start

Run the validator on the product folder you want to check, then iterate with auto-fixes for dash style if needed (for example: python3 skills/product-validator/scripts/validate.py <path> --fix).

Frequently Asked Questions about product-validator

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan a repository for secrets and sensitive data before review?

You can automate secrets scanning by running the validator script on your product folder to detect personal data markers, token-like strings, and sensitive information. It checks skill packages, group materials, and GitHub-style repositories to prevent security leaks before handoff.

What does YAML frontmatter validation check for in a SKILL.md file?

YAML frontmatter validation checks for required name and description fields in SKILL.md files. It also verifies triggers presence, enforces size limits, checks optional references integrity, and flags style issues like long or medium dashes before review.

How do I fix dash style issues in markdown files automatically?

Fix dash style issues automatically by running the validate.py script with the --fix flag on your product folder. This deterministic correction replaces long and medium dashes with standard dash characters to ensure consistent formatting across skill packages and materials.

Can I use this validator for GitHub projects with README and LICENSE files?

Yes, the validator supports GitHub-style repositories by confirming the presence of core documentation files like README.md. It also recommends including LICENSE, INSTALL, and .gitignore files to ensure proper repository structure before review.

Why does path linting flag absolute paths in skill files?

Path linting flags absolute paths starting with /Users/, /home/, or /root/ because they expose local system structures and create portability issues. Detecting these unsafe paths before review ensures skills and materials work consistently across different environments.

Do I need yaml installed to run pre-review checks on skill packages?

Yes, the yaml dependency is required to parse and validate YAML frontmatter in SKILL.md files. The validator uses it to enforce required fields, triggers, and structure expectations across skill packages, group materials, and repository files before handoff.