skills.rest
EvilBit-Labs
EvilBit-LabsOFFICIAL
Explore all skills by this author →
Website𝕏@EvilBitLabsGitHub

security-scan

Audit Claude Code configurations for security issues and misconfigurations.

4|Updated Sep 14, 2025
Search Tags:#security#hooks#mcp#config#claude-code#scan#agentshield
One-click install
npx skills add https://github.com/EvilBit-Labs/DaemonEye --skill security-scan-evilbit-labs
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-scan
Source: https://github.com/EvilBit-Labs/DaemonEye/tree/main/.claude/skills/security-scan
Command: npx skills add https://github.com/EvilBit-Labs/DaemonEye --skill security-scan-evilbit-labs

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Audit Claude Code configurations for security issues such as hardcoded secrets, insecure settings, and risky integration points, helping teams prevent breaches and misconfigurations.

Core Features & Use Cases

  • Scan CLAUDE.md for prompt-injection vectors and misconfigurations
  • Validate settings.json, MCP configs, hooks, and agent definitions for risk
  • Auto-fix dangerous issues and scaffold secure defaults to reduce setup risk
  • Generate actionable remediation guidance and secure recommendations for CI pipelines

Quick Start

Run a fast security scan of the .claude directory using AgentShield to identify and remediate vulnerabilities.

Frequently Asked Questions about security-scan

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit Claude Code configurations for security risks?▼

To audit Claude Code configurations for security risks, scan the .claude directory using AgentShield to detect hardcoded secrets, insecure settings, and risky MCP servers, then apply the generated remediation guidance to fix the identified vulnerabilities.

What security issues can be detected in CLAUDE.md and settings.json files?▼

Security issues detected in CLAUDE.md and settings.json files include prompt injection vectors, hardcoded secrets, insecure settings, misconfigured hooks, risky agent definitions, and dangerous MCP server integrations that could lead to breaches.

Can I integrate Claude Code security scanning into CI pipelines?▼

Yes, you can integrate Claude Code security scanning into CI pipelines by running AgentShield to validate configurations, which generates actionable remediation guidance and secure recommendations directly within your continuous integration workflow.

How do I fix misconfigured MCP servers and hooks in Claude Code?▼

To fix misconfigured MCP servers and hooks in Claude Code, run a security scan to identify risky integration points, then use the auto-fix feature to scaffold secure defaults and apply remediation guidance to correct the dangerous issues.

Do I need AgentShield to scan .claude directory configurations?▼

Yes, the security scan of the .claude directory configurations is powered by AgentShield, which performs the vulnerability detection and remediation across CLAUDE.md, settings.json, MCP configs, hooks, and agent definitions.

Related Skills

Explore More Software Engineering Skills→
Sake-TeamSake-Team

security-scan

Scan Claude Code configurations for vulnerabilities and misconfigurations.

Official
Advanced
rodrigotoledorodrigotoledo

nx-ci-monitor

Monitor Nx Cloud CI pipelines and apply self-healing fixes.

Community
Advanced
SergeiGolosSergeiGolos
1

vulnerability-scanner

Detect and prioritize security vulnerabilities across dependencies, secrets, code patterns, and configurations.

Community
Advanced
MantisWareMantisWare

security-auditor

Identify security vulnerabilities, misconfigurations, and secrets in software projects.

Community
Advanced