lg-shield

What problem does it solve?

This Skill acts as a critical guardrail, preventing security vulnerabilities and ensuring that the application's architecture and data flow adhere to defined standards, protecting against secrets leakage and layer violations.

Core Features & Use Cases

• Secret Detection: Scans for hardcoded API keys, passwords, and sensitive credentials in various file types.
• Repository Hygiene: Enforces rules for .gitignore and prevents committing large binary files.
• Layer Boundary Validation: Ensures that code imports respect the defined architectural layers (e.g., no UI code directly calling network services).
• Data Flow Integrity: Verifies that data follows the canonical pipeline from external APIs down to the LG Rig.
• Dependency Audit: Checks for vulnerable packages and unnecessary permissions.
• Use Case: Before deploying any changes, run lg-shield to automatically verify that no API keys have been accidentally committed and that the UI layer is not making direct network calls, ensuring a secure and maintainable codebase.

Quick Start

Run the shield scan to check for security issues and architectural violations.