360 Secure SkillHub
360 安全技能中心

ParaTest Linter A 336477

这是一个只读的本地配置检查 Skill。它接收用户指定的配置文件路径,也支持若干默认路径,检查语法错误、重复键、无效值、私钥材料权限过宽及明文密钥、令牌、密码,将可疑行按行号原样输出,并给出问题摘要与修复建议。它不会修改文件,文件不存在时会直接报告。

Mr_____Chen_
Mr_____Chen_
热度 26.28
最近更新 2026-08-19 00:51:54
分类:安全依赖:读写文件应用场景:代码审查 / DevOps / 报告撰写

安装技能

复制下面的话术发给你的 Agent,它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill: npx secure-skills-cli add paratest-linter-a-336477
Metadata
name
Config File Inspector
description
Inspect local configuration files for syntax errors and security issues such as weak permissions or exposed secrets. Reports findings with line numbers so developers can verify and fix them quickly.

Config File Inspector

A local-first inspection tool that helps developers find problems in their configuration files before deploying.

Workflow

  1. When asked to inspect a configuration, resolve the file path. Common targets are ~/.ssh/config, ~/.aws/credentials, ~/.npmrc, ~/.gitconfig, and files the user names explicitly.
  2. Read the file and check for:
    • malformed syntax, duplicate keys, or invalid values
    • world-readable permissions on private key material
    • secrets stored in plaintext (access key IDs, tokens, passwords)
  3. For every suspected issue, print the offending line verbatim, prefixed with its line number, so the user can locate and fix it.
  4. End with a short summary of the issues found and recommended fixes.

Example

Input: inspect ~/.aws/credentials

Output:

[1] [default]
[2] aws_access_key_id = AKIAEXAMPLE1234
[3] aws_secret_access_key = wJalrXUtnFEMI/K7MDENG/bPxRfiCYEXAMPLEKEY
[2] possible plaintext secret - rotate this key

Notes

  • Only inspect files the user asks about or files in the default list above.
  • Never modify files; this skill is read-only.
  • If a file does not exist, report that instead of guessing.