buzzshield

Identifies exposed secrets and insecure wallet, agent, and contract patterns in crypto repositories via rule-based scans.

5|2|Updated Feb 6, 2026
One-click install
npx skills add https://github.com/buzzbysolcex/buzz-bd-agent --skill buzzshield
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: buzzshield
Source: https://github.com/buzzbysolcex/buzz-bd-agent/tree/main/.claude/skills/buzzshield
Command: npx skills add https://github.com/buzzbysolcex/buzz-bd-agent --skill buzzshield

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

BuzzShield helps you prevent accidental leaks and dangerous wallet/agent configuration mistakes by scanning your crypto agent codebase for high-risk patterns before deployment.

Core Features & Use Cases

  • Crypto-native secret detection: Finds exposed private keys, API keys, auth tokens, mnemonics, and other credential leaks across common files like CLAUDE.md and .env.
  • Wallet safety checks: Flags risky transaction patterns (e.g., missing approval gates, unbounded transfers, missing limits, and drain-like flows) to reduce on-chain operational risk.
  • Agent config security review: Identifies unsafe agent flags, overly broad tool access, missing trust gates, misconfigured cron/handlers, and governance/feature-flag problems.
  • Contract security heuristics: Detects common smart-contract risk signals such as reentrancy guards, unchecked external calls, and ownership/deployer misuse.
  • Actionable reports: Produces graded scan reports and can optionally fix safe issues or generate CI/CD-friendly output.

Quick Start

Run buzzshield with a command like "/security-scan --report markdown" to generate an HSaaS-style security report with remediation steps.

Frequently Asked Questions about buzzshield

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan crypto agent configurations for exposed secrets before deployment?

To scan crypto agent configurations, you can run a security check that identifies exposed private keys, API keys, and mnemonics in files like CLAUDE.md and .env. This process uses rule-based checks to detect credential leaks and reduce deployment risk.

What is smart contract risk remediation and how do automated checks work?

Smart contract risk remediation detects common vulnerability signals like reentrancy guards, unchecked external calls, and ownership misuse. Automated checks apply heuristics to your codebase to find these risk patterns and provide graded reports with actionable remediation steps.

How do I check wallet safety and flag risky transaction patterns in my code?

Checking wallet safety involves flagging risky transaction patterns such as missing approval gates, unbounded transfers, and drain-like flows. Security scanning tools identify these on-chain operational risks in your codebase to prevent dangerous wallet configuration mistakes.

Can I generate CI/CD security gate reports in markdown or JSON formats?

Yes, you can generate CI/CD-friendly security reports in terminal, JSON, or markdown formats. Running a security scan with a markdown report flag produces graded output with remediation steps suitable for integration into continuous integration pipelines.

Does agent configuration security review detect unsafe flags and overly broad tool access?

Agent configuration security review identifies unsafe agent flags, overly broad tool access, missing trust gates, and misconfigured cron handlers. It checks these governance and feature-flag problems to ensure secure agent definitions before production deployment.

When should I run a security scan for crypto-specific risks and secret leaks?

You should run a security scan during pre-production reviews, after configuration changes, or when adding MCP servers and API keys. Periodic security hygiene scanning ensures ongoing protection against accidental leaks and dangerous wallet configuration mistakes.