wa:validate-security

What problem does it solve?

It helps you catch security weaknesses early by reviewing your changes for secrets, vulnerabilities, and dependency issues before they reach production.

Core Features & Use Cases

• Calibrated security scanning: Runs in lite, conditional, or strict rigor modes to balance coverage and noise.
• Secret detection: Scans code and config for hard-coded secrets and reports CRITICAL findings with remediation guidance.
• AI vulnerability review + dependency audit: Runs an AI-focused /security-review for high-confidence issues and complements it with npm audit or Python auditing when available.
• Action-ready security report: Aggregates results and recommends deployment blocking when CRITICAL issues are present.

Quick Start

Run the wa:validate-security skill with standard rigor to generate a security report for your current changes.