What files does this skill validate?

It reviews CLAUDE.md, skill files (SKILL.md), agent definitions, prompt files, and settings.json files within the .claude directory.

Does it help with token optimization?

Yes, it evaluates configurations for progressive disclosure patterns and oversized files to ensure efficient token usage during AI interactions.

How does it provide feedback?

The skill generates structured, inline comments for specific lines of code, prioritizing issues by severity from 'Suggested' to 'Critical'.

Can it detect leaked API keys?

Yes, it performs a mandatory security scan to detect hardcoded secrets, tokens, and improperly committed settings.local.json files.

Why is YAML frontmatter validation important?

Correct YAML frontmatter is required for Claude Code to properly discover, categorize, and activate your custom skills and agents.

Claude Configuration Validator

Name: Claude Configuration Validator
Author: bitwarden

The Claude Configuration Validator is a comprehensive auditing tool designed to ensure your Claude Code environment is secure, efficient, and well-structured. It performs automated reviews of CLAUDE.md files, skill definitions, agent manifests, and project settings to catch critical issues like hardcoded secrets, malformed YAML frontmatter, and inefficient token usage. By following a structured review process, this skill helps developers maintain high-quality AI orchestration patterns while preventing the accidental exposure of sensitive credentials or local configurations.

Key Features

01Automated security scanning for hardcoded secrets and committed local settings

02Validation of YAML frontmatter for skills, agents, and prompts

03123 GitHub stars

04Integration with Bitwarden secret detection for enhanced security coverage

05Multi-pass review strategy for CLAUDE.md and project-level instructions

06Analysis of progressive disclosure patterns for token efficiency

Use Cases

01Optimizing Claude's performance through structural and prompt quality reviews

02Securing AI-enabled repositories by detecting leaked API keys and tokens

03Auditing pull requests that modify .claude configuration or skill files

Tieline — product intent grounded in code

Claude Configuration Validator

Key Features

Use Cases

1Password CLI

GateGuard Pre-Action Gate

Skill Compliance Checker

Key Features

Use Cases