skills.rest
Ewallyw
EwallywCOMMUNITY
Explore all skills by this author →
GitHub

security-scan

Scan Claude Code configurations for vulnerabilities, misconfigurations, and injection risks.

Updated May 31, 2026
Search Tags:#vulnerability assessment#Claude Code#configuration management#security scanning#AgentShield
One-click install
npx skills add https://github.com/Ewallyw/claude-config-public --skill security-scan-ewallyw
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-scan
Source: https://github.com/Ewallyw/claude-config-public/tree/main/claude-config-master/claude-config-master/skills/security-scan
Command: npx skills add https://github.com/Ewallyw/claude-config-public --skill security-scan-ewallyw

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires ecc-agentshield, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill scans Claude Code configurations for security vulnerabilities, misconfigurations, and injection risks, ensuring a secure environment.

Core Features & Use Cases

  • Security Vulnerability Scanning: Identifies hardcoded secrets, auto-run instructions, and prompt injection patterns.
  • Configuration Checks: Validates permissions, MCP servers, hooks, and agent definitions.
  • Use Case: Before deploying Claude Code configurations, use this Skill to ensure security best practices are followed.

Quick Start

Run the security scan on your Claude Code configuration with the command: npx ecc-agentshield scan .

Frequently Asked Questions about security-scan

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan my Claude Code configuration for security vulnerabilities?▼

To run a security scan on your Claude Code configuration, execute the command `npx ecc-agentshield scan .` to identify hardcoded secrets, auto-run instructions, and prompt injection patterns.

What is prompt injection scanning in Claude Code settings?▼

Prompt injection scanning identifies malicious patterns within CLAUDE.md, settings.json, and MCP server definitions that could manipulate Claude's behavior or expose sensitive data.

Does the security scanner check MCP servers and hooks for misconfigurations?▼

Yes, the scanner validates permissions and checks MCP servers, hooks, and agent definitions to ensure your Claude Code environment follows security best practices.

Do I need AgentShield to run automated security checks on Claude Code?▼

Yes, you need the ecc-agentshield dependency installed because the Skill requires AgentShield for execution to automate vulnerability assessments and configuration checks.

When should I run a security scan on my Claude Code configuration?▼

You should run a security scan before deploying Claude Code configurations to identify vulnerabilities, misconfigurations, and injection risks, ensuring a secure environment.

Related Skills

Explore More Software Engineering Skills→
KanakMalpaniKanakMalpani

security-scan

Audit Claude Code configurations for security vulnerabilities and misconfigurations using AgentShield.

Community
Intermediate
EojEdredEojEdred

security-hardening

Scan code and configurations for security vulnerabilities and replay risks.

Community
Intermediate
Sake-TeamSake-Team

security-scan

Scan Claude Code configurations for vulnerabilities and misconfigurations.

Official
Advanced
woxiangyangzhimaowoxiangyangzhimao
3

security-scan

Scan Claude Code configurations for secrets and injection risks.

Community
Advanced