fleet-scanning-security

Name: fleet-scanning-security
Availability: InStock
Author: Socket

Scan CLAUDE config, GitHub Actions, and dependencies to generate an A-F graded security report.

125|42|Updated May 19, 2025

Search Tags:#security #github-actions #scanning #grading #zizmor #agentshield

Ready to run

npx skills add https://github.com/SocketDev/socket-mcp --skill fleet-scanning-security

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: fleet-scanning-security
Source: https://github.com/SocketDev/socket-mcp/tree/main/.agents/skills/fleet-scanning-security
Command: npx skills add https://github.com/SocketDev/socket-mcp --skill fleet-scanning-security

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

Orchestrates automated security checks across repository configurations and workflows to produce a validated, graded security report.

Core Features & Use Cases

Multi-tool checks: AgentShield for Claude config, zizmor for GitHub Actions, and optional Socket CLI for dependency scanning.
Generates an A-F graded security report and stores a local, untracked report.

Quick Start

Run a full security scan with fleet-scanning-security after updating claude configs, agent definitions, or GitHub workflows to produce a graded report.

Frequently Asked Questions about fleet-scanning-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I automate GitHub Actions security scanning for my repository workflows?▼

Automated GitHub Actions security scanning runs zizmor to detect misconfigurations and vulnerabilities in your workflows, producing a graded report. It validates workflow files after configuration changes or before releases to maintain security hygiene.

What is the best way to scan Claude agent configs for security issues?▼

Scanning Claude agent configs for security issues uses AgentShield to analyze CLAUDE configuration files and agent definitions. It identifies potential risks and generates an A-F graded security report to help validate configurations before deployment.

Can I run dependency scanning alongside GitHub Actions and Claude config checks?▼

Dependency scanning runs alongside GitHub Actions and Claude config checks using the optional Socket CLI. It integrates dependency analysis into the multi-tool security scan to produce a comprehensive graded report covering repository configurations and dependencies.

Does automated security scanning generate a report I can use for compliance checks?▼

Automated security scanning generates an A-F graded report based on vulnerability counts from zizmor and AgentShield scans. It stores a local, untracked report file and provides a handoff summary for compliance verification and remediation tracking.

When should I run multi-tool security scans across my repository?▼

Run multi-tool security scans after updating CLAUDE configs, agent definitions, or GitHub workflows, before releases, and for periodic security hygiene checks. Scanning after configuration changes ensures vulnerabilities are caught early across complex repositories.

What security grade scale does the automated scanning report use?▼

The automated scanning report uses an A-F grading scale based on vulnerability counts from AgentShield and zizmor scans. This counts-based grade provides a clear security posture indicator for repository configurations, workflows, and dependencies.