skills.rest
its-Basudeba
its-BasudebaCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

security-scan

Scan Claude Code configuration files for security vulnerabilities and misconfigurations.

1|Updated Apr 11, 2026
Search Tags:#security#vulnerability#audit#compliance#claude-code#hardening
One-click install
npx skills add https://github.com/its-Basudeba/Care-HMS --skill security-scan-its-basudeba
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-scan
Source: https://github.com/its-Basudeba/Care-HMS/tree/main/.agent/skills/security-scan
Command: npx skills add https://github.com/its-Basudeba/Care-HMS --skill security-scan-its-basudeba

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires ecc-agentshield.

What problem does it solve?

This Skill addresses the risk of misconfigured development environments by identifying security vulnerabilities, hardcoded secrets, and overly permissive access controls within your Claude Code setup.

Core Features & Use Cases

  • Vulnerability Assessment: Scans configuration files like settings.json and CLAUDE.md for security gaps.
  • Automated Remediation: Provides safe, automated fixes for common misconfigurations and secret exposure.
  • Use Case: Before deploying a new project or onboarding a team, run this scan to ensure that your agent permissions are scoped correctly and no sensitive credentials are accidentally exposed in your configuration files.

Quick Start

Use the security-scan skill to audit the current project configuration for potential vulnerabilities and security risks.

Frequently Asked Questions about security-scan

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan my Claude Code configuration for security vulnerabilities?▼

To scan your Claude Code configuration for security vulnerabilities, use this Skill to evaluate settings.json, CLAUDE.md, and MCP server definitions to detect hardcoded secrets and excessive permission scopes. It implements automated hardening workflows to ensure secure agent operation and compliance with best practices.

What is the best way to audit hardcoded secrets in settings.json?▼

The best way to audit hardcoded secrets in settings.json is to run an automated vulnerability assessment that evaluates configuration files for security gaps and provides safe, automated remediation for common misconfigurations and secret exposure.

Can I automatically fix excessive permission scopes in CLAUDE.md?▼

Yes, you can automatically fix excessive permission scopes in CLAUDE.md by running this Skill to provide automated remediation for common misconfigurations and ensure that your agent permissions are scoped correctly.

Does the security-scan Skill require ecc-agentshield to work?▼

Yes, the security-scan Skill requires the ecc-agentshield dependency to function properly. You must have this prerequisite installed to successfully identify security vulnerabilities and misconfigurations within your Claude Code project environments.

When should I audit my Claude Code project for misconfigurations?▼

You should audit your Claude Code project for misconfigurations before deploying a new project or onboarding a team. Running this scan ensures that your agent permissions are scoped correctly and no sensitive credentials are accidentally exposed in your configuration files.

Related Skills

Explore More Software Engineering Skills→
aayushsoamaayushsoam
1

security-scan

Scan Claude Code configurations for security vulnerabilities and generate severity-graded risk reports.

Community
Intermediate
khanelimankhaneliman
340

system-planning

Plan and implement NixOS system configurations for reproducible deployments.

Community
Advanced
TitoPrauseeTitoPrausee

native-mcp

Connect external MCP servers as native tools via stdio or HTTP.

Community
Advanced
sayasaya8039sayasaya8039
2

security-scan

Scan Claude Code configuration directories for security vulnerabilities and misconfigurations.

Community
Intermediate