deploy-validate
Performs pre-deployment validation checks to ensure environment configuration, dependencies, and API compatibility are correct.
Install this skill
Security score
The deploy-validate skill was audited on Feb 9, 2026 and we found 25 security issues across 3 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
Curl to non-GitHub URL
| 42 | curl -f http://localhost:3000/health |
Access to .env file
| 33 | - Validate .env presence without reading contents |
Access to .env file
| 62 | - Standard security checks (.env in .gitignore, etc.) |
Access to .env file
| 70 | git diff --name-only origin/main | grep -E '(\.env\.example|Dockerfile|k8s/)' |
Access to .env file
| 77 | - Read .env.example: 400 tokens |
Access to .env file
| 78 | - Read .env: 400 tokens |
Access to .env file
| 153 | # Check for .env.example |
Access to .env file
| 154 | if [ ! -f ".env.example" ]; then |
Access to .env file
| 155 | echo "⚠️ No .env.example file found" |
Access to .env file
| 159 | echo "✓ .env.example found" |
Access to .env file
| 161 | # Check if .env exists |
Access to .env file
| 162 | if [ ! -f ".env" ]; then |
Access to .env file
| 163 | echo "⚠️ No .env file (okay for production, should use environment variables)" |
Access to .env file
| 165 | # Compare .env with .env.example |
Access to .env file
| 166 | EXAMPLE_VARS=$(grep -v '^#' .env.example | grep '=' | cut -d'=' -f1 | sort) |
Access to .env file
| 167 | ACTUAL_VARS=$(grep -v '^#' .env | grep '=' | cut -d'=' -f1 | sort) |
Access to .env file
| 187 | . 2>/dev/null | grep -v "process.env\|os.environ\|config\." || echo "") |
Access to .env file
| 452 | # Check for .env in git |
Access to .env file
| 453 | if git ls-files | grep -q "^\.env$" 2>/dev/null; then |
Access to .env file
| 454 | echo "❌ .env file is tracked in git!" |
Access to .env file
| 455 | echo " CRITICAL: Remove .env from git and add to .gitignore" |
Access to .env file
| 458 | echo "✓ .env not tracked in git" |
Access to .env file
| 467 | if ! grep -q "\.env" .gitignore; then |
Access to .env file
| 468 | echo "⚠️ .env not in .gitignore" |
External URL reference
| 42 | curl -f http://localhost:3000/health |