validate-security

What problem does it solve?

This Skill automatically analyzes code changes to detect security vulnerabilities, helping teams prevent insecure code from entering the main branch.

Core Features & Use Cases

• Hard violations detection: Secrets, credentials, injection flaws, path traversal, insecure configurations, and authentication/authorization gaps.
• Should violations guidance: Identifies insecure configurations and enforcement gaps, with actionable remediation hints.
• Diff-based analysis & batching: Scans git diffs and staged changes, supporting batched processing (up to 50 files per run) for scalable validation.
• Auditable reporting: Outputs a structured JSON report detailing violations, affected files, and pass/fail status to guide fixes during code review.

Quick Start

Run the security validator against the current diff by invoking the /validate command in your project context. It will return a JSON report with hard/should/warn violations and a summary to guide fixes.