Security Validation

Comprehensive security scanning for code and documentation changes before merge. Detects and enforces remediation of:

• Secret exposure (API keys, tokens, passwords, credentials)
• Path portability issues (user-specific absolute paths)
• Insecure SSH configurations (disabled host verification)
• Security-weakening flags (without proper warnings)

When to Use

Execute security-validation at these critical gates:

1. Before committing - Action Agent, Frontend Developer (catch issues early)
2. Before creating PR - All implementation agents (pre-merge gate)
3. During QA validation - QA Agent Step 8 (Security & Quality Gates)
4. After security fixes - Verify remediation applied correctly
5. When modifying security-sensitive code - Authentication, secrets management, configs

Validation Workflow