Security Validation

Secret detection scans your codebase and documentation for exposed credentials, API keys, and sensitive data before merge. The Skill applies automated checks at pre-merge gates, flags violations with explicit pass/fail criteria, and provides remediation guidance to fix exposures before they reach production.

SSH security validation checks your configurations for risky settings and unverified host verification patterns. The Skill enforces safe SSH practices across code and docs, detecting dangerous flag usage and providing clear remediation steps to strengthen your deployment security.

Path portability checks identify hardcoded user-specific paths and absolute references that fail across environments. The Skill validates documentation and source code at pre-commit and pre-merge stages, catching non-portable configurations early with standardized reporting.

Security validation integrates into code-review and planning workflows to enforce compliance gates across documentation, configuration, and code. The Skill applies standardized security checks with explicit pass/fail criteria and escalation paths when violations are found.

Yes. Pre-commit validation covers documentation only, while pre-merge validation checks both docs and source code. The Skill detects secrets, insecure configurations, and dangerous flags across all input types with unified reporting and remediation guidance.

Beyond secrets, the Skill detects user-specific paths that break portability, insecure SSH host configurations, and security-weakening flags in code and docs. Each check has explicit pass/fail criteria and standardized reporting to guide remediation before merge.