skills.rest
Femad-6
Femad-6COMMUNITY
Explore all skills by this author →
WebsiteGitHub

security-scan

Scan Claude Code configuration files for security vulnerabilities and misconfigurations using AgentShield.

Updated Mar 25, 2026
Search Tags:#ci/cd#claude code#security scan#vulnerability detection#prompt injection#configuration audit#agentshield
One-click install
npx skills add https://github.com/Femad-6/my-skills --skill security-scan-femad-6
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-scan
Source: https://github.com/Femad-6/my-skills/tree/main/.github/skills/security-scan
Command: npx skills add https://github.com/Femad-6/my-skills --skill security-scan-femad-6

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires ecc-agentshield.

What problem does it solve? Claude Code configurations like CLAUDE.md, settings.json, and MCP server definitions can contain hardcoded secrets, overly permissive permissions, and prompt injection risks that are easy to miss during manual review. ## Core Features & Use Cases - Configuration Auditing: Scans CLAUDE.md, settings.json, mcp.json, hooks, and agent definitions for hardcoded secrets, wildcard permissions, and injection patterns. - Auto-Fix and Grading: Applies safe automatic fixes such as replacing secrets with environment variable references, and assigns an A-F security grade. - CI/CD Integration: Outputs JSON, Markdown, or HTML reports and provides a GitHub Action for pipeline enforcement. - Use Case: Before committing changes to .claude/settings.json, run a scan to catch a Bash(*) wildcard permission or a hardcoded API key before it reaches production. ## Quick Start Ask the assistant to run a security scan on the current project's .claude directory and report any critical or high severity findings.

Frequently Asked Questions about security-scan

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan my Claude Code configuration for security issues?▼

Run npx ecc-agentshield scan in your project root to audit the .claude directory. You can filter results with --min-severity medium or export reports using --format json, markdown, or html.

What security risks does AgentShield check in Claude Code configs?▼

AgentShield checks CLAUDE.md for hardcoded secrets and prompt injection patterns, settings.json for overly permissive allow lists, mcp.json for risky servers and supply chain risks, and hooks for command injection and data exfiltration.

Can AgentShield automatically fix security findings?▼

Yes, running npx ecc-agentshield scan --fix applies safe automatic fixes such as replacing hardcoded secrets with environment variable references and tightening wildcard permissions. Manual-only suggestions are never modified.

Does the security scan work in CI/CD pipelines?▼

Yes, AgentShield provides a GitHub Action (affaan-m/agentshield@v1) that scans a path with a configurable minimum severity and can fail the build on findings. JSON output format also supports custom pipeline integration.

What are the limitations of the auto-fix feature?▼

Auto-fix only applies to findings explicitly marked as auto-fixable, such as secret replacement and permission scoping. Complex issues like hook injection patterns or agent tool access require manual remediation based on the report recommendations.

Related Skills

Explore More Software Engineering Skills→
EvilBit-LabsEvilBit-Labs
4

security-scan

Audit Claude Code configurations for security issues and misconfigurations.

Official
Advanced
0xHoneyJar0xHoneyJar

audit-env

Scan environment files, client code, and git history for secret leakage.

Official
Advanced
BenWork17BenWork17

vulnerability-scanner

Identify and prioritize software vulnerabilities across code repositories and CI/CD pipelines.

Community
Advanced
KanakMalpaniKanakMalpani

security-scan

Audit Claude Code configurations for security vulnerabilities and misconfigurations using AgentShield.

Community
Intermediate