security-scan

Scan Claude Code configuration files for security vulnerabilities and misconfigurations.

1|Updated Apr 11, 2026

Search Tags:#security #vulnerability #audit #compliance #claude-code #hardening

Ready to run

npx skills add https://github.com/its-Basudeba/Care-HMS --skill security-scan-its-basudeba

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security-scan
Source: https://github.com/its-Basudeba/Care-HMS/tree/main/.agent/skills/security-scan
Command: npx skills add https://github.com/its-Basudeba/Care-HMS --skill security-scan-its-basudeba

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires ecc-agentshield.

What problem does it solve?

This Skill addresses the risk of misconfigured development environments by identifying security vulnerabilities, hardcoded secrets, and overly permissive access controls within your Claude Code setup.

Core Features & Use Cases

Vulnerability Assessment: Scans configuration files like settings.json and CLAUDE.md for security gaps.
Automated Remediation: Provides safe, automated fixes for common misconfigurations and secret exposure.
Use Case: Before deploying a new project or onboarding a team, run this scan to ensure that your agent permissions are scoped correctly and no sensitive credentials are accidentally exposed in your configuration files.

Quick Start

Use the security-scan skill to audit the current project configuration for potential vulnerabilities and security risks.

Frequently Asked Questions about security-scan

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I scan my Claude Code configuration for security vulnerabilities?▼

To scan your Claude Code configuration for security vulnerabilities, use this Skill to evaluate settings.json, CLAUDE.md, and MCP server definitions to detect hardcoded secrets and excessive permission scopes. It implements automated hardening workflows to ensure secure agent operation and compliance with best practices.

What is the best way to audit hardcoded secrets in settings.json?▼

The best way to audit hardcoded secrets in settings.json is to run an automated vulnerability assessment that evaluates configuration files for security gaps and provides safe, automated remediation for common misconfigurations and secret exposure.

Can I automatically fix excessive permission scopes in CLAUDE.md?▼

Yes, you can automatically fix excessive permission scopes in CLAUDE.md by running this Skill to provide automated remediation for common misconfigurations and ensure that your agent permissions are scoped correctly.

Does the security-scan Skill require ecc-agentshield to work?▼

Yes, the security-scan Skill requires the ecc-agentshield dependency to function properly. You must have this prerequisite installed to successfully identify security vulnerabilities and misconfigurations within your Claude Code project environments.

When should I audit my Claude Code project for misconfigurations?▼

You should audit your Claude Code project for misconfigurations before deploying a new project or onboarding a team. Running this scan ensures that your agent permissions are scoped correctly and no sensitive credentials are accidentally exposed in your configuration files.