Claude Configuration Validator
Validates Claude Code configuration files for security vulnerabilities, structural integrity, and prompt engineering quality.
The source repository doesn't declare a license. Check its terms before reusing the code.
Key features
- Automated security scanning for hardcoded secrets and committed local settings
- Validation of YAML frontmatter for skills, agents, and prompts
- Integration with Bitwarden secret detection for enhanced security coverage
- Multi-pass review strategy for CLAUDE.md and project-level instructions
- Analysis of progressive disclosure patterns for token efficiency
Use cases
- Optimizing Claude's performance through structural and prompt quality reviews
- Securing AI-enabled repositories by detecting leaked API keys and tokens
- Auditing pull requests that modify .claude configuration or skill files
FAQ
What files does this skill validate?
It reviews CLAUDE.md, skill files (SKILL.md), agent definitions, prompt files, and settings.json files within the .claude directory.
Does it help with token optimization?
Yes, it evaluates configurations for progressive disclosure patterns and oversized files to ensure efficient token usage during AI interactions.
How does it provide feedback?
The skill generates structured, inline comments for specific lines of code, prioritizing issues by severity from 'Suggested' to 'Critical'.
Can it detect leaked API keys?
Yes, it performs a mandatory security scan to detect hardcoded secrets, tokens, and improperly committed settings.local.json files.
Why is YAML frontmatter validation important?
Correct YAML frontmatter is required for Claude Code to properly discover, categorize, and activate your custom skills and agents.
Related skills
Security Audit
Conducts comprehensive security assessments and vulnerability remediation for PHP applications following OWASP guidelines and CVSS risk scoring.
Security Testing612 ptsReact Native Security Audit
Identifies security vulnerabilities, sensitive data leaks, and insecure implementation patterns in React Native applications across both JavaScript and native code layers.
Security Testing12 pts