القائمة
Validate configuration files for syntax correctness and best practices. Use when user asks to check config files, validate YAML/JSON/TOML syntax, or audit configuration security.
التثبيت باستخدام Codex أو Claude انسخ هذا Prompt والصقه في Codex أو Claude أو مساعد آخر ليراجع صفحة Skill ويثبّتها لك.
استنادا إلى تصنيف SOC المهني
本地离线 OCR 文字识别，基于 tesseract.js。当用户发图片/截图/扫描件要求提取文字时使用，支持中英文。纯本地运行，无需联网。
Use when completing tasks, implementing major features, or before merging to verify work meets requirements
Use when implementing any feature or bugfix, before writing implementation code
Creating algorithmic art using p5.js with seeded randomness and interactive parameter exploration. Use this when users request creating art using code, generative art, algorithmic art, flow fields, or particle systems. Create original algorithmic art rather than copying existing artists' work to avoid copyright violations.
Applies Anthropic's official brand colors and typography to any sort of artifact that may benefit from having Anthropic's look-and-feel. Use it when brand colors or style guidelines, visual formatting, or company design standards apply.
Create beautiful visual art in .png and .pdf documents using design philosophy. You should use this skill when the user asks to create a poster, piece of art, design, or other static piece. Create original visual designs, never copying existing artists' work to avoid copyright violations.
| name | config-validator |
| description | Validate configuration files for syntax correctness and best practices. Use when user asks to check config files, validate YAML/JSON/TOML syntax, or audit configuration security. |
| version | 1.0.0 |
| author | deskwand |
| license | MIT |
| metadata | {"tags":["Config","Validation","YAML","JSON","TOML","Security","Audit"]} |
| allowed-tools | read,shell,glob,grep |
Check configuration files for errors and security issues.
# Syntax validation
python3 -c "import yaml; yaml.safe_load(open('config.yml')); print('Valid YAML')"
# Check for common issues
python3 -c "
import yaml
data = yaml.safe_load(open('config.yml'))
# Check for duplicate keys (yaml silently uses last value)
# Check indentation consistency
print(f'Top-level keys: {list(data.keys())}')
"
# Syntax validation
python3 -m json.tool config.json > /dev/null && echo "Valid" || echo "Invalid"
# Check for trailing commas, duplicate keys
# Python 3.11+
python3 -c "import tomllib; tomllib.load(open('config.toml', 'rb')); print('Valid TOML')"
# Older Python: pip install tomli
python3 -c "import tomli; tomli.load(open('config.toml', 'rb')); print('Valid TOML')"
# Check for missing values, unquoted special chars
grep -n '=$' .env && echo "⚠️ Lines with empty values"
grep -n '=.*#' .env && echo "⚠️ Possible inline comments (not supported in .env)"
# High-confidence patterns
grep -rn --include="*.{yml,yaml,json,toml,env,ini,conf}" \
-E "(password|secret|api_key|token|private_key)\s*[:=]\s*['\"][^'\"]{6,}['\"]" .
# Broader scan (more false positives)
grep -rn --include="*.{yml,yaml,json,toml}" \
-iE "(password|secret|token|key|credential)" .
# Docker: privileged mode
grep -rn "privileged:\s*true" docker-compose*.yml
# Kubernetes: hostNetwork, hostPID
grep -rn "hostNetwork:\s*true\|hostPID:\s*true" *.yaml
# CORS: wildcard origins in production
grep -rn "Access-Control-Allow-Origin:\s*\*" .
docker compose config --quiet # validates and normalizes
# Check workflow syntax via GitHub API
gh api repos/OWNER/REPO/actions/workflows/main.yml/dispatches 2>&1
node -e "JSON.parse(require('fs').readFileSync('package.json','utf8')); console.log('Valid')"
When auditing project configs, check:
.env is found in the scan target, warn user it should be in .gitignore