Can it detect security vulnerabilities?

Yes, it specifically scans for hardcoded secrets and plain text values, recommending the use of secretKeyRef for secure secret management.

How does it help with microservice deployment?

It identifies configuration errors like port conflicts or missing required metadata fields before you deploy, reducing debugging time and runtime errors.

Does it support custom Dapr component types?

It supports all standard Dapr component types including state stores, pub/sub, secret stores, and bindings for major providers like AWS, Azure, and GCP.

When does Claude trigger this skill?

Claude uses it automatically when you create or modify Dapr-related YAML files, or when you explicitly ask it to validate your Dapr configuration.

What files does this skill validate?

It validates the primary dapr.yaml project file and all Dapr component YAML files typically found within the components/ directory.

Dapr Configuration Validator

Name: Dapr Configuration Validator
Author: Sahib-Sawhney-WH

bySahib-Sawhney-WH

•

Deployment & DevOps

Automatically validates Dapr configuration files and component manifests to ensure schema compliance, security, and runtime readiness.

About

The Dapr Configuration Validator is an essential tool for microservices developers, designed to catch errors in dapr.yaml and component files before they cause runtime failures. It systematically checks for missing required fields, invalid API versions, and common misconfigurations across state stores, pub/sub brokers, and secret stores. By proactively identifying security risks like hardcoded secrets and validating cross-referenced resources, this skill streamlines the Dapr development workflow and ensures configurations adhere to best practices before deployment.

Key Features

Automated security scanning to detect hardcoded secrets in YAML files
2 GitHub stars
Detailed validation reports with actionable fixes for errors and warnings
Support for diverse Dapr components including Redis, Kafka, and Azure services
Cross-reference checking between app IDs, ports, and referenced resources
Real-time schema validation for dapr.yaml and component manifests

Use Cases

Debugging microservice connectivity issues caused by mismatched app IDs or ports
Verifying component configurations before deploying to a Kubernetes cluster
Enforcing security best practices by migrating from plain text secrets to secret stores

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add sahib-sawhney-wh/sahibs-claude-plugin-marketplace config-validator

For use in Claude.ai and ChatGPT

Download Skill

GitHub