Security Validation Scanner

소개

The Security Validation skill provides a robust framework for auditing code and documentation before it reaches production. It utilizes automated scanning to identify critical vulnerabilities such as exposed API keys, credentials, and user-specific absolute paths that hinder portability. By implementing a severity-based enforcement system, the skill ensures that critical security risks block merges while high-priority issues are flagged for mandatory remediation. This tool is essential for developers and QA teams looking to integrate DevSecOps best practices directly into their Claude-powered workflows.

주요 기능

• 0 GitHub stars
• Automated detection of secrets, API keys, and hardcoded credentials
• Severity-based enforcement (CRITICAL, HIGH, MEDIUM) with merge blocking
• Validation of SSH configurations and insecure security-weakening flags
• Identification of user-specific absolute paths that break portability
• Detailed reporting with remediation guidance and JSON output support

사용 사례

• Automated gatekeeping during the PR review process to prevent secret leaks
• Standardized security validation within QA workflows and deployment pipelines
• Pre-commit security checks to catch vulnerabilities during local development