How do I install the Leak Guard skill?

Run npx skillmds@latest add abbaye/leak-guard in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.

Is Leak Guard safe to use?

This skill has not completed SkillMD's automated safety review yet. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.

Which AI agents work with Leak Guard?

This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.

Is Leak Guard free to use?

Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.

Who published Leak Guard?

abbaye (@abbaye) published this skill. Their other Agent Skills are listed on their SkillMD profile.

Leak Guard by abbaye — Agent Skill

Name: Leak Guard
Author: abbaye

Leak Guard

INTERNAL DEV WORKFLOW for WpfHexEditor — Claude self-invokes after editing C# files that touch IDisposable, events, FileStream, Process, Timer, or files under Services/, *Manager.cs, *Service.cs, *Watcher*, *Adapter.cs. Detects: event handlers added without unsubscribe, IDisposable without Dispose, missing GC.SuppressFinalize, FileStream without using, Timer not stopped, Process not disposed, static event collections, weak-event candidates, hardcoded secrets. Skip on: Tests/, Samples/, *.Designer.cs, *.g.cs, generated code.

abbaye bce4dbc 5 files · 16.9 KB Updated Sep 17, 2026

File contents

leak-guard (internal)

Static guard for memory/handle/event leaks and secret hygiene (75+ IDisposable implementations, lots of file watching, long-lived LSP handlers).

When I invoke

Situation	Run?
Edit `.cs` with `IDisposable`/`event`/`+=`, or `FileStream`/`File.Open`/`Process`/`Timer`	yes
Edit under `Services/`, `Manager.cs`, `Service.cs`, `Watcher`, `*Adapter.cs`	yes
`Tests/`, `Samples/`, `.Designer.cs`, `.g.cs`, rename/comment only	no

Pipeline

scripts/leak-scan.ps1 -Files <paths> → Leaks: <summary> or OK + per-issue lines. Suppress: // leak-ok: <reason> on the offending line.

9 rules

Rule	Sev	Detected via
`event-no-unsubscribe`	warn	`+=` on event without matching `-=` in `Dispose`/`Unloaded` of same class
`idisposable-no-dispose`	error	`: IDisposable` without `Dispose()` method body
`dispose-no-suppress-finalize`	warn	`~Class()` finalizer + `Dispose()` lacks `GC.SuppressFinalize(this)`
`filestream-no-using`	warn	`new FileStream(`/`File.Open(` not in `using`, not a field
`timer-no-stop`	warn	`new (DispatcherTimer\|Timer\|System.Timers.Timer)(` field without `Stop()`/`Dispose()` reference
`process-no-dispose`	warn	`Process.Start`/`new Process(` without `using`, result assigned to local
`static-event-collection`	error	`public static event` OR `static List/Dict/HashSet` mutated by instance methods
`weak-event-candidate`	warn	`+=` on `Application.Current.`, `Dispatcher.`, or `.Instance.` from `UserControl`/`Window`
`secret-in-source`	error	`(api[_-]?key\|password\|secret\|token)\s=\s"[A-Za-z0-9+/=]{16,}"`

secret-in-source skips // fixture lines and Tests/Fixtures/. Full rule detail: references/leak-rules.md.

Output

Leaks: 2 event-no-unsubscribe, 1 timer-no-stop | 0 secrets
  FileMonitorService.cs:42        event-no-unsubscribe  _watcher.Changed += OnFileChanged (no -= in Dispose)
  HighlightPipelineService.cs:128 timer-no-stop         DispatcherTimer field never .Stop()

Static single-file analysis only. No runtime profiling, code rewrite, or cross-file tracking.

Maintenance

New leak pattern → row in references/leak-rules.md + extend $rules in leak-scan.ps1. New long-lived host singleton → add to weak-event-candidate source list in script.

---name: leak-guarddescription: INTERNAL DEV WORKFLOW for WpfHexEditor — Claude self-invokes after editing C# files that touch IDisposable, events, FileStream, Process, Timer, or files under Services/, *Manager.cs, *Service.cs, *Watcher*, *Adapter.cs. Detects: event handlers added without unsubscribe, IDisposable without Dispose, missing GC.SuppressFinalize, FileStream without using, Timer not stopped, Process not disposed, static event collections, weak-event candidates, hardcoded secrets. Skip on: Tests/, Samples/, *.Designer.cs, *.g.cs, generated code.---# leak-guard (internal)Static guard for memory/handle/event leaks and secret hygiene (75+ IDisposable implementations, lots of file watching, long-lived LSP handlers).## When I invoke| Situation | Run? ||---|---|| Edit `.cs` with `IDisposable`/`event`/`+=`, or `FileStream`/`File.Open`/`Process`/`Timer` | yes || Edit under `Services/`, `*Manager.cs`, `*Service.cs`, `*Watcher*`, `*Adapter.cs` | yes || `Tests/`, `Samples/`, `*.Designer.cs`, `*.g.cs`, rename/comment only | no |## Pipeline`scripts/leak-scan.ps1 -Files <paths>` → `Leaks: <summary>` or `OK` + per-issue lines.Suppress: `// leak-ok: <reason>` on the offending line.## 9 rules| Rule | Sev | Detected via ||---|---|---|| `event-no-unsubscribe` | warn | `+=` on event without matching `-=` in `Dispose`/`Unloaded` of same class || `idisposable-no-dispose` | error | `: IDisposable` without `Dispose()` method body || `dispose-no-suppress-finalize` | warn | `~Class()` finalizer + `Dispose()` lacks `GC.SuppressFinalize(this)` || `filestream-no-using` | warn | `new FileStream(`/`File.Open(` not in `using`, not a field || `timer-no-stop` | warn | `new (DispatcherTimer\|Timer\|System.Timers.Timer)(` field without `Stop()`/`Dispose()` reference || `process-no-dispose` | warn | `Process.Start`/`new Process(` without `using`, result assigned to local || `static-event-collection` | error | `public static event` OR `static List/Dict/HashSet` mutated by instance methods || `weak-event-candidate` | warn | `+=` on `Application.Current.*`, `Dispatcher.*`, or `*.Instance.*` from `UserControl`/`Window` || `secret-in-source` | error | `(api[_-]?key\|password\|secret\|token)\s*=\s*"[A-Za-z0-9+/=]{16,}"` |`secret-in-source` skips `// fixture` lines and `Tests/Fixtures/`. Full rule detail: `references/leak-rules.md`.## Output```Leaks: 2 event-no-unsubscribe, 1 timer-no-stop | 0 secrets FileMonitorService.cs:42 event-no-unsubscribe _watcher.Changed += OnFileChanged (no -= in Dispose) HighlightPipelineService.cs:128 timer-no-stop DispatcherTimer field never .Stop()```Static single-file analysis only. No runtime profiling, code rewrite, or cross-file tracking.## MaintenanceNew leak pattern → row in `references/leak-rules.md` + extend `$rules` in `leak-scan.ps1`.New long-lived host singleton → add to `weak-event-candidate` source list in script.

Frequently asked questions