security-scan

Name: security-scan
Availability: InStock
Author: Aayushsoam

Scan Claude Code configurations for security vulnerabilities and generate severity-graded risk reports.

1|Updated Mar 31, 2026

Search Tags:#security #verification #vulnerabilities #risk-assessment #claude-code #config-scan #agentshield

Ready to run

npx skills add https://github.com/aayushsoam/clawbot-plus --skill security-scan-aayushsoam

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security-scan
Source: https://github.com/aayushsoam/clawbot-plus/tree/main/skills/security-scan
Command: npx skills add https://github.com/aayushsoam/clawbot-plus --skill security-scan-aayushsoam

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Scan Claude Code configurations for security vulnerabilities, misconfigurations, and injection risks using AgentShield to reduce risk and hardening processes.

Core Features & Use Cases

Comprehensive configuration audit: checks CLAUDE.md, settings.json, mcp.json, and hooks for secrets exposure, prompt injection vectors, and unsafe automations.
Targeted risk assessment: flags insecure agent definitions and high-risk servers, with severity grading and remediation guidance.
Auto-fix readiness: supports safe, automated fixes via AgentShield when available.
Use Case: before committing config changes or onboarding to a new Claude Code project, run scans to ensure a secure baseline.

Quick Start

Run the AgentShield scan on your Claude Code configuration to identify security issues.

Frequently Asked Questions about security-scan

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I scan Claude Code configurations for security vulnerabilities?▼

To scan Claude Code configurations for security vulnerabilities, use AgentShield to audit the .claude directory. It checks CLAUDE.md, settings.json, mcp.json, and hooks to identify secrets exposure, prompt injection vectors, and unsafe automations.

What security risks should I check before committing changes to CLAUDE.md?▼

Security risks in CLAUDE.md changes include secrets exposure, prompt injection vectors, and insecure agent definitions. Running a configuration audit flags these issues with severity grading and provides remediation guidance to establish a secure baseline.

Do I need AgentShield installed to audit my Claude Code settings?▼

Yes, you need AgentShield installed to audit Claude Code settings. You can install it globally via npm install -g ecc-agentshield or run it directly using npx ecc-agentshield scan to produce a structured risk report.

Can I automatically fix insecure Claude Code agent definitions and high-risk servers?▼

You can automatically fix insecure Claude Code agent definitions and high-risk servers when safe, automated fixes are available. AgentShield supports auto-fix readiness to remediate flagged vulnerabilities during your configuration audit.

When should I run a security audit on my Claude Code project?▼

Run a security audit when applying new Claude Code projects, making changes to CLAUDE.md or settings.json, and during periodic repository hygiene checks across teams. This ensures a secure baseline before committing configuration changes.

What does a Claude Code configuration risk report include?▼

A Claude Code configuration risk report includes severity grading for identified vulnerabilities, targeted risk assessment for high-risk servers, and remediation guidance. It checks mcp.json, hooks, and settings for misconfigurations and injection risks.