skills.rest
avel123111
avel123111COMMUNITY
Explore all skills by this author →
GitHub

ecc-security-scan

Scan Claude Code configuration files for security vulnerabilities and misconfigurations using AgentShield.

Updated May 26, 2026
Search Tags:#claude code#security scan#prompt injection#secrets detection#configuration audit#agentshield#ci security
One-click install
npx skills add https://github.com/avel123111/triplanio --skill ecc-security-scan-avel123111
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: ecc-security-scan
Source: https://github.com/avel123111/triplanio/tree/main/.claude/skills/ecc-security-scan
Command: npx skills add https://github.com/avel123111/triplanio --skill ecc-security-scan-avel123111

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires ecc-agentshield.

What problem does it solve? Claude Code configuration files like CLAUDE.md, settings.json, and MCP server configs can contain hardcoded secrets, overly permissive permissions, and prompt injection risks that are easy to miss during manual review. ## Core Features & Use Cases - Configuration Auditing: Scans CLAUDE.md, settings.json, mcp.json, hooks, and agent definitions for hardcoded secrets, wildcard permissions, and injection patterns. - Auto-Fix and Grading: Applies safe automatic fixes such as replacing secrets with environment variable references and assigns an A-F security grade. - Use Case: Before committing changes to your .claude directory, run a scan to catch a Bash(*) wildcard permission or an exposed API key, then export a JSON report for your CI pipeline. ## Quick Start Scan my Claude Code configuration for security vulnerabilities and show me any critical findings.

Frequently Asked Questions about ecc-security-scan

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan my Claude Code configuration for security issues?▼

Run npx ecc-agentshield scan in your project directory to audit the .claude folder. You can target a specific path with --path, filter results with --min-severity, and export reports in JSON, Markdown, or HTML formats.

What security issues does AgentShield detect in Claude Code configs?▼

AgentShield detects hardcoded API keys and secrets, unrestricted Bash(*) permissions, command injection in hooks via interpolation, risky MCP servers, auto-run instructions in CLAUDE.md, and missing deny lists in settings.json.

Can AgentShield automatically fix security findings?▼

Yes, running npx ecc-agentshield scan --fix applies safe automatic fixes such as replacing hardcoded secrets with environment variable references and tightening wildcard permissions. Findings marked as manual-only are never modified.

How do I add Claude Code security scanning to a CI pipeline?▼

Use the affaan-m/agentshield GitHub Action with a path, min-severity, and fail-on-findings setting. Alternatively, run npx ecc-agentshield scan --format json in your CI script and parse the output for failing grades.

Does the deep analysis mode require an API key?▼

Yes, the --opus deep analysis mode requires an ANTHROPIC_API_KEY environment variable. It runs a three-agent pipeline with attacker, defender, and auditor roles for adversarial review of your configuration.

Related Skills

Explore More Software Engineering Skills→
emiled16emiled16

security-scan

Audit Claude Code configuration files for security vulnerabilities and misconfigurations.

Community
Intermediate
0xHoneyJar0xHoneyJar

audit-env

Scan environment files, client code, and git history for secret leakage.

Official
Advanced
adaptive-enforcement-labadaptive-enforcement-lab
3

secure

Scan code, dependencies, and containers for vulnerabilities and generate SBOMs.

Official
Advanced
voidrotvoidrot

security-scan

Scan Claude Code and agent configurations for security vulnerabilities.

Community
Advanced