skills.rest
aleonsa
aleonsaCOMMUNITY
Explore all skills by this author →
GitHub

security-scan

Scan Claude Code configurations for security vulnerabilities and misconfigurations using AgentShield.

1|Updated Mar 10, 2026
Search Tags:#security#vulnerability#configuration#auditing#code security#agentshield
One-click install
npx skills add https://github.com/aleonsa/claude-config --skill security-scan-aleonsa
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-scan
Source: https://github.com/aleonsa/claude-config/tree/main/claude/skills/security-scan
Command: npx skills add https://github.com/aleonsa/claude-config --skill security-scan-aleonsa

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill helps identify and mitigate security vulnerabilities and misconfigurations within your Claude Code setup, protecting against potential risks and ensuring a secure development environment.

Core Features & Use Cases

  • Vulnerability Scanning: Detects hardcoded secrets, injection risks, and overly permissive settings.
  • Configuration Auditing: Analyzes CLAUDE.md, settings.json, MCP configs, hooks, and agents for security best practices.
  • Use Case: Before committing your Claude Code configuration changes, run this skill to ensure no sensitive information has been accidentally exposed and that your settings adhere to security standards.

Quick Start

Run a basic security scan on the current project's .claude/ directory.

Frequently Asked Questions about security-scan

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan my Claude Code configuration for security vulnerabilities?▼

To scan your Claude Code configuration for security vulnerabilities, run this skill on your project's .claude directory to detect hardcoded secrets, injection risks, and overly permissive settings using AgentShield.

What is AgentShield and how does it audit CLAUDE.md and settings.json files?▼

AgentShield is a security tool that audits CLAUDE.md, settings.json, MCP configs, hooks, and agent definitions to identify misconfigurations and ensure your Claude Code setup adheres to security best practices.

Does this security scan require AgentShield to be installed locally?▼

AgentShield does not require a permanent local installation; the security scan can execute successfully as long as AgentShield is installed on your system or can be run via npx.

Can I check MCP servers and hooks for injection risks before committing config changes?▼

Yes, you can check MCP servers and hooks for injection risks by running this skill before committing, which analyzes your configurations to prevent accidental exposure of sensitive information.

What types of misconfigurations does a Claude Code security scan detect?▼

A Claude Code security scan detects misconfigurations such as hardcoded secrets, injection risks, and overly permissive settings across your CLAUDE.md, settings.json, MCP servers, hooks, and agent definitions.

Related Skills

Explore More Software Engineering Skills→
ZESCODEZESCODE

security-scan

Scan Claude Code configuration files for secrets and misconfigurations.

Community
Advanced
LiamVDB1LiamVDB1

security-scan

Scan Claude Code configurations for security vulnerabilities and misconfigurations.

Community
Intermediate
ssssssssassssssssssssssassssss

development-guides

Provides advanced development guidance for the Kailash SDK, including custom nodes, async execution, and MCP integration workflows.

Community
Advanced
SergeiGolosSergeiGolos
1

vulnerability-scanner

Detect and prioritize security vulnerabilities across dependencies, secrets, code patterns, and configurations.

Community
Advanced