Security Validation

Detect hardcoded secrets and insecure configurations in documentation and source code.

6|1|Updated Nov 12, 2025

Search Tags:#security #compliance #secrets #SSH #risk #pre-merge

Ready to run

npx skills add https://github.com/auldsyababua/instructor-workflow --skill security-validation

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: Security Validation
Source: https://github.com/auldsyababua/instructor-workflow/tree/main/skills/security-validate
Command: npx skills add https://github.com/auldsyababua/instructor-workflow --skill security-validation

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

A comprehensive security validation gate that detects secrets, user-specific paths, insecure SSH configurations, and dangerous flags before merge.

Core Features & Use Cases

Secret detection in docs and code
Path portability checks to avoid user-specific paths
SSH security configuration validations
Detection of security-weakening flags and risky patterns
Clear remediation guidance and escalation when needed

Quick Start

Run a repository-wide scan and review the report to fix critical issues before merge.

Frequently Asked Questions about Security Validation

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I detect hardcoded secrets in my source code before merging?▼

Secret detection scans your codebase and documentation for exposed credentials, API keys, and sensitive data before merge. The Skill applies automated checks at pre-merge gates, flags violations with explicit pass/fail criteria, and provides remediation guidance to fix exposures before they reach production.

Can I validate SSH configurations and prevent insecure host settings?▼

SSH security validation checks your configurations for risky settings and unverified host verification patterns. The Skill enforces safe SSH practices across code and docs, detecting dangerous flag usage and providing clear remediation steps to strengthen your deployment security.

What's the best way to catch user-specific paths that break portability?▼

Path portability checks identify hardcoded user-specific paths and absolute references that fail across environments. The Skill validates documentation and source code at pre-commit and pre-merge stages, catching non-portable configurations early with standardized reporting.

How do I enforce security checks in code review and planning workflows?▼

Security validation integrates into code-review and planning workflows to enforce compliance gates across documentation, configuration, and code. The Skill applies standardized security checks with explicit pass/fail criteria and escalation paths when violations are found.

Does this work for both documentation and source code validation?▼

Yes. Pre-commit validation covers documentation only, while pre-merge validation checks both docs and source code. The Skill detects secrets, insecure configurations, and dangerous flags across all input types with unified reporting and remediation guidance.

What security risks does this catch beyond hardcoded secrets?▼

Beyond secrets, the Skill detects user-specific paths that break portability, insecure SSH host configurations, and security-weakening flags in code and docs. Each check has explicit pass/fail criteria and standardized reporting to guide remediation before merge.