360 Secure SkillHub
360 安全技能中心

Cuihua Config Validator

面向 JSON/YAML 配置文件(package.json、tsconfig.json、docker-compose.yml 及 .env 等)的校验工具,可发现语法错误、缺失变量、硬编码密钥等风险,并给出修复示例与最佳实践建议;实现为本地 Node 脚本,需要 Node 运行时。

supermario11
supermario11
热度 43.57
最近更新 2026-05-11 17:35:51
分类:效率依赖:代码执行 / 读写文件应用场景:工作流 / 代码审查

安装技能

复制下面的话术发给你的 Agent,它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill: npx secure-skills-cli add cuihua-config-validator
Metadata
name
cuihua-config-validator
description
AI-powered configuration validator. Automatically validate JSON/YAML configs, detect conflicts, and suggest best practices.
metadata
{"openclaw":{"requires":{"bins":["node"],"env":[]}},"version":"1.0.0","author":"翠花 (Cuihua) - ClawHub Pioneer","license":"MIT","tags":["config","validation","json","yaml","best-practices"]}

cuihua-config-validator ⚙️

Validate configs with AI-powered insights

Features

  • JSON/YAML validation
  • Environment variable checks
  • Conflict detection
  • Best practices

Quick Start

"Validate package.json" "Check .env file"

Install

```bash clawhub install cuihua-config-validator ```

MIT | 🌸 Cuihua

What It Does

Validates configuration files and catches common mistakes:

JSON Validation

  • Syntax errors
  • Missing commas
  • Trailing commas
  • Invalid escape sequences

Environment Variables

  • Missing required vars
  • Typos in variable names
  • Unused variables
  • Security risks (hardcoded secrets)

Best Practices

  • Naming conventions
  • Structure recommendations
  • Performance tips
  • Security guidelines

Examples

Input:

{
  "name": "my-app"
  "version": "1.0.0"
}

Output:

❌ Syntax error (line 2): Missing comma after "my-app"

Fix:

{
  "name": "my-app",
  "version": "1.0.0"
}

Supported Formats

  • package.json
  • tsconfig.json
  • .env files
  • docker-compose.yml
  • Custom JSON/YAML

Full docs: https://clawhub.ai/skills/cuihua-config-validator